That sucks. What's the email address they set up the account with? Did they use like a burner or something?
Maybe if you capture the IP address you can tell geo-location?