I’m going to claim he was detected by automated money laundering prevention systems when he collected the cash. Spotify learned about it from the feds, or their payment processor.
Besides that, in the indictment it says clearly that he was using the thousands of generated titles and bot accounts specifically to work around new anti-fraud systems. This is a classic cat and mouse game.