S gets money orders in mail from online acquaintance. Plan is to cash money orders and send to another person. Money orders are counterfeit.

Same S is busted using CC# of a victim from out of state. Appears S and victim "met" on line. Also appears info may have been gotten from computer, phishing or worm. Victim denies ever giving info out. S does not appear to have capability to get info.

Is there any agency/office working these kind of cases?

Try the AG's Cyber Crimes Unit.