What investigators often look for isn't just wallet age, but funding patterns, timing, and linkages between wallets