On cybercrime forums, user complaints about being duped may accidentally expose their real identities.