I suspect it's the other way - they have his prints on file already from some previous arrest, and the image linked the incriminating EncroChat account to his real identity through the data already on file.