Probably including it in their profile name. As far as I'm aware, there is no authority verifying anyone. It's definitely not part of the protocol, but it's theoretically possible for a third party service to track npubs for people who want to show ID and be verified.