There are way more other methods also, won't disclose them here. During my search for proof on other cases, I have hit a dead end many times because of that, even tough I'm 90% sure who where those users.
Transparency from exchanges could solve some problems, but then they will create more exchanges accounts, just that it will slow their progress, which is a good thing.