They aren't making money by "tracking Crypto transactions", they are making money by selling their service to the government and other companies that are forced to use them. I also haven't seen them being useful in tracking anything really, they are always there though. For example when the law enforcement track and catch criminals they always do it because they used some centralized KYC enforcing service not because of blockchain analyzers. Take twitter hacker for instance, they were caught because they were using Coinbase! Chainanalysis was there and gave a report but it was Coinbase that led to their capture.
If they are using such service then either it's for only governments use or that service itself who may or may not be making the money. But I really don't understand it's use in anyway. This is straight away violation of people's trust on KYC agreements? I mean they can not really sell the details like KYC to any third party or government for that matter.
According to any ToC basically one can only have authority of using KYC details of someone if they are legally claimed i.e. there is jurisidiol notice against that person and they want that information to be presented in the financial fraud or so.
