Many thanks Lafu, much appreciated, yes I feel that these particular scammers are probably better organised than many, unfortunately, especially as in that they haven't rushed to cash out into fiat and blow the loot ASAP without case to traceability

My friend has written it off as to needing to learn a lesson the hard way, and doesn't expect that they'll see any of the coins back again, but we would still like to track what has happened as much as possible, and how it all progresses when the coins move again

The first addie that they sent a test transfer (I guess) to, may be a complete red herring, as surely they're smart enough to know that once the funds landed in their scammer receiving addie then they were in the bag and there was no need to check that by moving any, perhaps they wanted to show and prove to a third party that they really had landed that catch, who knows?

Could even be kidnapped forced scammer from Myanmar, in which case I wish them well, maybe they get to eat steak for one week and not lose their kidneys to harvesting gangs ¯\_(ツ)_/¯

Though I doubt that...