Maybe it's worthwhile to add that privacy coins are illegal in Japan. 

So "analyzing the flow of Monero" could literally mean they know some monero was sent somewhere
(the article also says the feds were in their chat group),
and then they found a suspect in possession of monero.