There's a few different ways, if they need to say they store them hashed, maybe they are hashing a T9 version (at severely reduced entropy).