So law enforcement was able to intercept/obtain logs of all the perpetrator’s Google Translate queries. How does that work? Assume he was not logged in. Did they just continuously obtain his IP when his device announced itself in a cell phone network and then monitored all the traffic and ordered Google to provide all the activity for that IP?

Edit: apparently his accomplice living in the U.S. was under FBI surveillance. “The use of Google Translate was not Durovic's only operational failure. He made two trips to Russia, in July and October 2024, attempting to disguise his destination by booking ostensible vacations to Turkey while continuing to Moscow on connecting flights under his real name. Each time he returned to the United States, he was questioned by FBI special agents who had access to his airline records. He flatly denied having visited Russia. The lies were transparent, and they compounded his legal exposure. The FBI, however, was content to wait — continuing to surveil him and read his virtual diary on Google Translate — before finally arresting him in March 2025.”