We don’t need to guess, the article says:

> Working with Chainalysis, a blockchain analytics company, the agents studied thousands of Helix transactions, subpoenaed emails, and ultimately found one involving a website that allows users to buy gift cards with Bitcoin. An email associated with Larry was used to open the account.

If you’ve got an email address associated with a Google account, it’s a plain old warrant.