Police cite suspected cryptocurrency payments, alleged reconnaissance videos and possible international terror links as grounds for a wider probe