Regulators are increasingly targeting how crypto products are marketed, not just the firms behind them.