^^ Thief could have been connected to proxy when sending the email, seems unlikely that they would be so foolish as to connect with their real IP.  That said, what do you have in mind to trace the sender?