My guess would be that Microsoft tipped them off. I couldn't find in the compliant where the IRS or Secret Service got involved, but it does say that Microsoft Fraud Investigators discovered the fraud and fired him.