Simple;

from block chain of the scammers adress, you can get all the involved BTC adresses and amounts...

From there there are few possibilities