Often by people manually modifying ones they bought themselves.

And, interestingly, many satellite receivers allow users to just enter a frequency in the supported range and they will happily load and display the data on that frequency.

FWIW I haven't seen anything in the new rules (admittedly I have focused on SDR and U-NII regs) which pretends to cover anything but intentional radiators (i.e. transmitters).