Stolen credit cards are not very difficult to get hold for these kind of people I imagine so it won’t be so straightforward as just getting data from the provider.

However jurisdiction and lack of funding for cybercrime policing is the main reason criminals don’t get caught .

Many cybercriminals operate in countries that do not cooperate, extradite and may even have tacit state approval .

Only the largest police departments like NYPD and few federal agencies like FBI have some cybercrime investigations capability and very little of that is for investigating crimes against individuals rather than institutional victims.

It is not an unsound approach when resources are limited you would want to prioritize institutions as that would protect or serve more individuals indirectly .

However the result is that you are far more likely get policing support when someone robs your house physically rather than your identity or assets online .