I get how it's possible.

I get less why a hacker would create multiple social media accounts to conceal identity and use something “nearly identical to their own passport photo as a profile pic on all of them.

OTOH, real criminals are caught all the time because they did things that seem unbelievably stupid when described, so I'm not discounting the possibility that's it's true, just saying it seems odd...