They must be reported into the regulators and I guess that's the only best way to catch them all. It looks like they were working on the same team. As long as we can identify the country they were based on and legal action against them can be taken by someone who based in the same area with them