From phishing email to cyber claim, how criminals monetize fraud