By having a country database of numbers and a clear set of rules for verification and assigning. (Usually on birth or name.)

European countries have those systems and they work. You cab try to lie about yippee number but this can be add hard as trying to brute force a CRC on the fly while also being easy to validate later against the database.