Three sources with knowledge of the investigation said the perpetrators used a method known as “card-not-present” to steal money from victims before moving the funds to other bank accounts.