I know what you're trying to say, but you're saying it terribly.

If Ad Platforms don't want to be held responsible for the fraud that their platform literally delivered to the victim, then they should have KYC for all of their Customers that pay them money to deliver advertising to their victims. That way, shock fucking horror, someone or something might actually be able to be held responsible.

And if the argument is that there are many ways that scapegoats can be used and shell companies setup to avoid actual responsibility, then we'll know more about the next layer of regulation that's required.

Or we just give up and say that fraud is OK (which, I believe, is the current thinking in the US).