For crimes where the criminal's "happy path" result is to take somewhere from $50 to $50,000, you'd expect that the most important cost element would be risk of getting caught and punished, although I have the impression that enforcement is not actually that strict.

That risk is practically zero, especially if you are operating out of a country that won't extradite to the country of your targets.

Remember Ukrainian cybercriminal that was caught when he crossed into Poland? Yeah you will need to remember to never go to any of those countries for the rest of your life. If criminal wants ever to live a nice lifestyle (which is probably why become criminal right?) then getting caught is high cost