From what I understand, they had a lead as to when he mailed one of the bombs at a FedEx store, and cross-referenced cell phone location data from that time with other places where they suspected the bombs were taken to be delivered. This guy's cell phone was found at multiple locations and times they believed the other bombs were brought for delivery.