Agents aren't subjects of criminal law. I agree there may be civil liability, I know far less about that.
These guys would be screwed if they were operating under the EU AI Act.
Unless there is a statue that is on point criminalizing the actions here no one is going to jail. I expect there will be laws, but until then it isn't illegal.