Were you able to find out the EBay and Paypal user ID's? With that, the police department can issue either a subpoena or search warrant for the records which will reveal the IP addresses and time/date stamps from the transactions. The end result will be another subpoena/search warrant for the user name and address from the ISP. It is time consuming having to wait on the responses from the businesses but you saved them a lot of time by doing most of the groundwork.
Criminal charges are one thing but have you considered also filing a civil lawsuit? I've read where identity theft victims have taken their thieves to court and sued for comparable worth time for all the time they spent working on their case. It is like businesses recouping "lost time and profit" when a hacker shuts down their servers. Turn the tables on the thief by garnishing his wages, destroying his credit, taking his tax refunds, and having more warrants for contempt of court when his sorry a@@ can't pay for the lawsuit. When the criminal charges are ready, then it will help to kick him to the ground even more. I would make this person a victim of his own crime!
I would do some more checking into how your card information was stolen. You may not of even lost the card but had some lowlife working at a business use a "skimmer" to grab your card information without even knowing.
A tool that you can use to make EBay/Paypal give you the records without waiting for the police is the Fair Credit Reporting Act Section 609(e) request (see links below):
- Deter. Detect. Defend. Avoid ID Theft http://www.ftc.gov/bcp/edu/pubs/busi...heft/bus66.pdf