Fraud and cybercrime: how do criminals do it?