They couldn't follow the money from Nirvana Finance until he confessed. The article is cagey on exactly where his OPSEC went wrong, but the fact they know about all his internet searches suggests he wasn't using a VPN. Dumbass...