I think they've must've somehow traced his wallet. Since Blockchains are like open ledgers, I guess they just had to attach or identity which wallets were his. There's always one geeky tech bro that can always do this for the government