How is that even possible?

I wonder if they somehow have that technology, or just say they do in order to intimidate people.

It does not "circumvent" masks. That is impossible. It just uses other facial data. But you're limiting it's efficacy.

Humans are extremely good at facial detection but if my mother walks by me wearing a mask, sunglasses and a baseball cap, I would not recognize her.