You don't need a brand to run a business model, in certain segments. Lonely, desperate men with no self esteem are sitting ducks for an anonymous promise of cheap, easy, self-medicated improvement.
Your other point is well made - at the moment, law enforcement can't legally respond to a spam email, pay for the product, and then follow the money trail. There are sound legal reasons for this but I reckon there is a good case for narrow legislation to deal with this specific problem. The answer isn't educating users: at the end of the day, you need a certain IQ level to recognise a given example of spam, and for any given IQ level, there will be a certain percentage of the population below that, no matter what you do to try and raise their awareness.