They literally do. Scammers, DDoSers, phishers, bot farms, etc all use VPNs to hide their locations. VPN IPs are commonly blacklisted by providers like cloudflare, meaning that if you use them you will be subject to anti bot security like captchas and time delays. Do you think that vpns just are magically not detectable?