They basically never investigate reports in person and will only punish people who get detected by their outstandingly faulty detection "tools".

That said, only outright hacking tends to be dealt with semi-frequently and even that can slip through the cracks depending on how people are abusing it.