It's tough for websites to block 'all' bad ads. You can see that Facebook can't, and neither can Google. It's like whack-a-mole.
It may not even be reasonable for HotCopper to be expected to have blocked this specific ad, since it may just fit into the 're-targeting' category. They can't be expected to disable re-targeting, which is an high-revenue ad type, and would usually not be a scam, but simply things you're interested in.
Educating people about avoiding the scams seems more important than berating HC, or Facebook or Google.
I am confident that Facebook would happily block all scam ads if they could, to protect their reputation. But since scam ads still pop up frequently, it seems that it's a tough job to block them. Last year it was scam crypto IPO ads, and now scam celebrity ads. Some years back also scam celebrity ads, but just under a different theme.