There is not enough information in the question to provide an answer. Some criminals following those steps won't get caught, so your friend might be right. Some will get caught because they were recognized during step 1. Some will get caught because of step 2 if the wifi hotspot leaks information, the seller happens to be a hacker spying on his customers, and investigators are smart enough. Some will get caught because of step 3 if the bank and the seller cooperate with smart enough investigators and they identify the criminal's personal wallet (unless they use Greg's advice).
In any case, the problems the criminal faces are 1) self-esteem, and 2) sustainability. As more bitcoin crime happens, the community gets better at preventing it, either through punishment or increasing the burden on the criminals. As a criminal continues earning his living by creating victims instead of partners, his relationship to the rest of his species degrades.