For us, we typically work with customers who are victims of fraud and the first time, we give them advice on how to better protect themselves and then refund them ~ the amount of profit we would have made. Ie we recoup costs but that’s it. For the financially aware, this is bad for our gross margin and profit but we do it to help customers the first time. After that though we expect them do implement some defenses otherwise our incentives aren’t aligned. Now however, we have Fraud Guard rolling out which should prevent much of the fraud in the first place.
There are other forms of bad actors but that’s the most prevalent these days.