It is straightforward, but not for publishers. The adexchanges know, and do business with shady companies on both sides because they make money from volume without any consequences.