They implement a physical Tor each time their check their box - layers of Taskrabbits hiring Taskrabbits. One picks up the Mail and hands it off to the next. The owner is one of the Taskrabbits somewhere in the chain.
This made it extremely difficult to capture the actual perp. He eventually walked away with minimal consequence, for lack of evidence/possession.
[0] established with false identification