The SEC should target the scams themselves, not exchanges.