When we went to war against someone using our name in a recruitement scam, by the time they moved on, it seemed like they were up 5x on what it costs them in domains.

It's all heavily automated, and I suspect there's some credit card fraud involved too. I also reckon there's a few unscrupulous registrars that are helping them.