Person A was instructed to send the device to an address in the Seychelles. But Wheeler said he heard through the group that the package never arrived.
"That was like a red flag to us," he said.
According to the indictment, Person A -- whose real name Wheeler said he knows -- gave the package to the FBI.
"The FBI actually bought the Durango," Wheeler said.
Wheeler said that and other details that have since emerged indicate that the agency may have been monitoring the group's activities, possibly by tapping Skype.
The other three men charged in the indictment are Sanadodeh Nesheiwat, 28, of Washington, New Jersey; David Pokora, 22, of Mississauga, Ontario, Canada; and Austin Alcala, 18, of McCordsville, Indiana.
Pokora and Nesheiwat pleaded guilty on Tuesday to conspiracy to commit computer fraud and copyright infringement and are scheduled for sentencing on Jan. 13, according to a news release from the U.S. Department of Justice.
Sign up for CIO Asia eNewsletters.