What can be done if someone scams something virtual, like runescape gold for instance. Do they just get banned or can legal action be taken?