I posted a basic hacking investigation job on Upwork and one of the people who applied seemed to be an excellent candidate. His cover letter informed me that he was USA licensed and certified, had been involved in the arrest of several high-profile hackers and had worked for the US department of defense and other agencies. I hired him and mailed my phone to him for investigation. He turned out to be located in a place called Gurugram Haryana India. Through email he confirmed receiving my phone, conducting his investigation and finding proof and IPs but now he will not ship anything (my phone, the new modded phone he upsold me and the hacking report) and will not respond to my messages via the site or my emails. I've reported him to the website and they're working on it but what else can I do? I'd rather have my phones and proof and etc. than perhaps an Upwork credit. I have his real name, bank details, home/office address and two email addresses plus all communication and receipts when applicable.
Sadly, you have nothing - no information of the true scammer, no money, and no phone.
Unfortunately, all the information above can be created on a whim, or passed through multiple gullible victims to hide the true source.
Your best bet at this point is to cut your losses, and move on. Sorry to be the bearer of bad news.