If you gave them an email address, it's possible they were able to verify you with 3rd party data brokers without your knowledge.