If you are a determined bad guy, you will find relatively easy ways to avoid detection. The good news is that most bad guys are not clever and not determined.
The bad guy will have gone through many, many steps to conceal his identity, through pirated or hacked accounts.