Your other point is well made - at the moment, law enforcement can't legally respond to a spam email, pay for the product, and then follow the money trail. There are sound legal reasons for this but I reckon there is a good case for narrow legislation to deal with this specific problem. The answer isn't educating users: at the end of the day, you need a certain IQ level to recognise a given example of spam, and for any given IQ level, there will be a certain percentage of the population below that, no matter what you do to try and raise their awareness.
I have never seen anything fill up a vacuum so fast and still suck. -- Rob Pike, on X.