> How do they know it's you

You scan the QR code and then download. Sometimes there is like a code you have to enter. It's a prepaid SIM, the carriers--particularly in East Asia or Africa--aren't particularly concerned with authenticating that much.