Widespread
Those who think that the situation in better in Europe because of GDPR are naive, this is a field where GDPR is hardly enforced. The same is true for transport payment cards, those that are not anonymous are easily tracked, but after some time even the anonymous ones can be associated with a person giving a rough overview of their whereabouts.
BTW what is the legal status in the US of prepaid anonymous SIM cards? Mandatory registration is also something that makes things worse.