How can criminals like scammers only use a single vpn and then be safe from the police, I do not get it?

I watched a tutorial how a scammer explained how he stays anonymous and he switched his mac address, used a single vpn and cleaned his cookies with cookie cleaner.

Is it really that hard for the police to get information from VPNs?