The general rule is that if you see an attack/ad, it's because someone is falling for it.
Attacks have costs, no matter how marginal, and if someone is paying that, they are probably funding it with the victim payouts.
Very rarely will attacks be funded on hopes, and if that happens, it's not for long until they run out of funds and energy.