This suspension has nothing to do with our fraud alerts. This type of suspension occurs when the contact details of the person who owns the domain are not updated or registered with ICANN.

The crook probably ended up suspending himself through his strategy of jumping around domain registrants. 
Probably the contact details he had were associated with a domain that has already been suspended/banned. Since he did not change the details, ICANN, when checking after the domain was transferred to another registrar, detected that the details were not up to date.

Now will he update the data, to have the domain active again? We will see in the next few days what happens.
Either way, this is clear proof that this was a scam domain, as a legitimate company or service would never let things get to this point.

We may not have been able to get the domain registrars to take action, but we were able to give the hacker a hard time by making him make mistakes that led to this outcome.