There must be a KYC for ICO process, so if they are SCAM they will be subject to punishment by the law. They can request KYC investors but the project does not need to declare, it too loose information for fraudsters to take advantage of.
the KYC is needed for the developer team not just for the investor when they want investing they're money in some project.
in 2015 i've seen some project called POD Proof of Developer, this project running for verifying developer some altcoin for running their project is a verified person