“In any normal investigation, if you see financial transactions between son and father, and email correspondence going back and forth, text messages, and WhatsApp messages, in every investigation we have ever worked on, we would follow those leads to the father.”