For me it looks like he bought this coins directly from a large miner, which makes sense to me.
in that case we would see an intermediate address...
Unless paying out to his clients were terms of the sale, or unless he bought the private keys themselves, etc.
People draw so many conclusions from so little data, I swear.