They know how to estimate the losses due to fraud. My primary fear about cyberspace is that people don't understand the risks, and they are putting too much faith in technology's ability to obviate them. Products alone cannot solve security problems. The digital security industry is in desperate need of a perceptual shift. Countermeasures are sold as ways to counter threats.
Good encryption is sold as a way to prevent eavesdropping.
A good firewall is a way to prevent network attacks. PKI is sold as trust management, so you can avoid mistakenly trusting people you really don't. And so on. This type of thinking is completely backward. Security is old, older than computers.