Depends But it all comes to the same way..
There must be some sort of Identification using a database.
So eg..
to actiavate an account
URL could look like this
domain.com/activiation.php?id=1
That way we know the activation id is one. And there username could be bob etc.