Crypto ads have been allowed on Google for a while already. Also, scams like this manage to get through because the ad submission part is mostly automated. It'd be incredibly unrealistic to expect Google employees to go through every single ad submission before they approve/decline them.