Rules in Graal only serve as a guideline, staff all have a good dose of common sense too to go with it.
Just because scamming is not explicitly prohibited in writing doesn't make it any more acceptable. My belief is that any action that defrauds or otherwise deceives another player and makes them lose something without their express consent or knowing for the gain of the scammer should be punishable.
This includes things like offering to farm but stealing gralats instead, or offering trades but not upholding your side of the deal when the other person has.
And that's the minor types of scams.
I have seen players openly scamming other players for private information, and thinking they're safe to do so.
I once caught a player in the act of asking a lot of other players for their Device ID numbers and iTunes login information. When warned, he replied "scamming isn't against the rules, u can't ban me, dumb***".
Normally, I would have just issued a simple warning for this, but the scammer's attitude and the fact that he had already obtained login data landed him a month-long IP-ban.
We get a lot of messages from scam victims asking to recover their lost items, but the important thing is that staff cannot return anything you lose if you fall victim to a scam. Your account information's safety is your own responsibility. It is your choice who to trust, and you should face any consequences.
Don't be fooled by greed. Remember - If an offer sounds too good to be true, then it probably is. No matter what they offer you; free VIP, free gralat packs, always be vigilant.
The best staff can do is disable scammers and prevent them from harming other players. We cannot get things back once the damage has already been done. We can't erase your login information from scammers' devices once you hand it over to them yourself.