Absence of prosecution contributes to chronic under-reporting of GoG attacks