Scihub checks Libgen first when looking up an article or book, and if there is no hit it will attempt to retrieve the document from the publisher directly using stored authentication credentials. The retrieved file will be later uploaded to Libgen by Scihub for caching purposes.
Seems like the publishers could relatively easily figure out whose credentials are being used by searching for presumably uncached files, which will then trigger an access to the file using the credentials Sci-Hub is using, no?
But I suppose it's no use since the authentication credentials to scientific portals aren't that exclusive anyway, so playing whack-a-mole would be pretty ineffective.