How do people with VPNs get caught?

How exactly do individuals who utilize VPNs to bypass restrictions and maintain anonymity end up getting caught by authorities or other monitoring entities? Is it a matter of sophisticated tracking techniques, or are there common mistakes that VPN users make that leave them vulnerable? Understanding the mechanisms at play here could offer valuable insights for those looking to maintain their digital privacy.