The thing is, it is difficult to track them down and prove who posted. And why. If I was challenged, I would say my account was hacked or my device was stolen. And that I did not make any money from what I did. Unless a lot of money was made fraudulently, it would not be worth the SECs time.
Somebody said they are sitting in their mothers basement making a few hundred bucks here, losing it there. That is actually true in some cases.
I know, some are making more too. But we are all hoping to make more.