I'm guessing here but it seems that the majority of the world pursues cybercrime investigations with foreign victims at the same rate as Russia, which is about 0 (unless for some reason we're all just never hearing about this great computer crime police work in Africa/Latam). Several African countries can't even pay government employee salaries on time, are they really going to be sending records requests to Google or Yahoo or Binance, infiltrating underground forums, or developing informants? Nigeria in the best case hands off the BEC suspects to America but rarely does police work themselves.

1) if your threat model is blocking direct connections from countries you deem unworthy, then I don't even know where to begin unpacking levels of wrong here.

2) proxies exist, many of which are your "first world residential ip address" thanks to IoT in every toaster.