They could (theoretically) request the IP addresses of the scam user. A small-scale local thief may well be using their computer without something like Tor.