Using the phone number as the identity. You need to verify ownership of the phone number to prove your identity. I guess they could use email as an alternative.