Historically, availability was very different between the two countries when we're specifically talking about purchasing SIMs for questionable activity.Physically acquiring the SIMs is only one part of the process as they're pretty worthless without going through the activation process.
Prior to this year in Mexico (which introduced ID-based regulations around SIM purchase/activation), you could buy a SIM at a remote gas station, a data package in cash, and activate it without giving your name/email/etc. Now, in 2026, you have to show an ID/passport to do that.
The U.S. doesn't have a federal regulation (as far as I know) for this. That level of network protection is usually at the provider level. However, activating the SIM almost always requires an email or existing phone number and not just purchase/possession of the SIM+top-up card. Purchasing the top-up card sometimes can be done in cash, other times requires a pre-paid debit which has its own limitations/regulations due to a mix of KYC/AML. But applying said top-up card usually still requires at least some form of identity verification. For some of the top national providers, and I'm not sure what model they use to gauge risk to make this decision, they even require an SSN (for prepaid!) and run some form of a check on you (I'm not entirely sure if it's a soft credit check or what).