@gaazkam As a bit of info, the vast majority of cyber criminals that get caught seem to be professional cyber criminals, ie that is their overt day job. There are others, such as students, or otherwise unemployed folks who also seem to make a living at cyber crime in their spare time
Those who attend Black Hat / Defcon run a real risk of arrest - you can google for a few high profile cases over the years
I would reckon the vast majority of skilled online criminals do not show up in the real world at all - even the Dread Pirate Roberts was only hunted down through a mistake in user accounts on Stack Overflow...