The maximum penalty is five years in prison and the head of the agency cracking down said the threat is real