They don't verify it, KYC is a requirement for institution to report to the government that they know where money is coming from. I wouldn't be surprised if a big chunk of kyc ICOs are selling info of their investors.