Most exchanges and startups issuing new coins are not regulating the identity checks of the users and most of them are represented by anonymous addresses. This is a big loophole in creating trust in the system.
When crypto criminals stole $2000 in coins from me in a transaction a few months back; it was even difficult to trace or enable regulation to trace the transaction. They were gone and the services were never performed. The laws trail behind as always. Cybercriminals 1; You Zero.