I know some people are doing it
I just don't know how.
Can you provide me some insight?
Of course they're doing that even if it's prohibited. Firstly you may choose an ICO that doesn't have a KYC, use Tor browser to visit their site from other regions and even if they want your passport, as I know lot of guys are selling their documents for that purposes