[JoeAltmaier]

That makes sense, and I hope it would work. Still, that's maybe an old view of how software and business work. In truth the app is a whipped-together thing, and the 'company' selling it is a shell. The address is a blind PO box.

Law department visits the box and finds nobody. Shell company changes name (indeed, perhaps they have a different name for every victim) and resume operation immediately. Hell, they never stop selling for a millisecond.

Follow the money? Ha. The modern ideas of currency make such schemes bulletproof.

[netdevphoenix]

Domain ownership, cloud accounts, IP addresses. All of these can be used to as a collection of evidence to pinpoint the target. In the old days, it would be harder but nowadays everyone is sheds fingerprint cells the same way leave dead cells with our DNA everywhere