I'd say two ways: a) AOL started logging for certain keywords through their SMTP servers or something along that way b) there is always a trail one way or another. With over 100,000 complaints, I suspect that there would have been some intelligent ones who did some tracing and such.

In reality, IMHO, there is always a trail to follow. It's just a question of how hard it is to follow and resources available.