A Brooklyn man got four to 12 years for posing as Coinbase and stealing $15.94 million from about 100 users. What the case shows about custody and tracing.