Investigators are analysing technical data such as IP addresses, device information and transaction trails to establish ownership and intent of the accounts.