I think in most cases bounty hunters use fake KYC data. Such data is full on the black market. This is not a problem. The main problem is absolutely the devaluation coin.
Not most of them but some of them use fake data. Still when airdrop is active, people use their own personal data for KYC. Not every guy knows about Black market or the ways to obtain other person's personal documents. Whatever, each and every person's KYC documents is always at risk with a 3rd party owners.