They have a proprietary algorithm that generates keys and shoves them into a DB, in many cases they have a form of checksum to quickly check the validity of keys in-form to reduce DB lookups. Credit/Debit card numbers also have a checksum built in

If you had enough keys, it might be possible to train a NN to generate new ones, they are after all fantastic at pattern recognition it’s their whole schtick