Newer paid scans can have IVs included for an additional fee (an extra $2.99 on a 7-day scan). As I understand it, they don't scan every single Pokemon for IVs, only those they deem of sufficient interest.
It's not an addition I'm particularly happy with. The scans themselves were bad enough, but they at least had an element of mystery to them.