On Sep 10 someone consolidated bitcoin from 829 addresses into address 32ZHZYwYATJj8jtoFvUQ9HEz7UoWnLgG5U then he moved the 45.5k BTC 540 times with 720 cash outs (total 1k BTC) at 26 exchanges and on Sep 14 he split the remaining 44.5 BTC again into 51 addresses. From the new addresses similar behavior continues.
This is a strange behavior. A smart money launderer would probably not co-spend 829 addresses. And a honest person likely would not do 540 transactions for cashing out because one typo or software error could move the $2bn unintentional as fee to a miner and he could have done this in one or two transactions.
What's your thought?
P.S:
This demonstrates how easy tracing bitcoin is and that a scammer has no reason to sleep well even not after years. As a first indicator for traceability one can use the Bitcoin privacy score of any BTC address, the lower the score the better your chances to find traces to exchanges where the scammers funds can be frozen.