Almost as profitable as a mobile phone company claiming they need your biometric data to take your cash to pay a prepaid fee, claiming they're doing so to protect YOU from harm in the way it sells a fraudster five phones using only your phone number for an ID.
That's after they've been made the subject of a consent decree for failing to provide adequate physical and virtual security and for using your data without consent for personal financial gain. Suits some companies to a T.