small time criminals have been doing this for years? I guess its so lucrative that they aren't considered small time after executing it on a useful bank account

small time criminals have been doing this for years? I guess its so lucrative that they aren't considered small time after executing it on a useful bank account its rampant on instagram, which introduced non-SMS OTP just a few months ago after everyone figured out their negligence was just to data mine phone numbers