There must be a KYC for ICO process, so if they are SCAM they will be subject to punishment by the law. They can request KYC investors but the project does not need to declare, it too loose information for fraudsters to take advantage of.