Most ICO scams use identifiers as well as fake addresses, so it is very difficult to find them to be punished. ICOs are not scam, they must comply with legal regulations in some areas.
Obviously, no scammer will definitely end up revealing their identity when they know what they are doing is absolutely against the normal rule of law and it is a punishable offence if caught and in that regard, they try as much as possible to hide who they are and make sure they cannot be traced to anything at all.
Although, we have heard of some who did some scam shit and ever since has been on the run, like one Confido project I invested in a while back, which was the first and only scam project I ever would have fallen for anyway.