Are Cheap Game Keys Safe? Authorized Stores vs Gray Market

Not all discounted game keys carry the same risk. Here is how the key market works, what distinguishes authorized retailers from gray market sites, and how to protect yourself.

What a game key is

When you buy a PC game digitally, you receive a key — a string of letters and numbers you redeem on a platform (Steam, GOG, Epic, etc.) to permanently add the game to your library. Publishers generate keys in bulk and sell them to retailers, both physical and digital.

The system is straightforward when it works. The complication is that once a key exists, it can be sold by anyone who possesses it, through any channel. This is where the risk comes in.

How authorized retailers work

Authorized retailers have a direct commercial relationship with the publisher or an official licensed distributor. When you buy from an authorized store, the key has a clear, legitimate chain of custody:

Publisher → Licensed distributor → Authorized retailer → You

Every link in that chain is accountable. Authorized retailers for PC games include:

• Humble Bundle — Bundles with a pay-what-you-want structure and a charity component. Also runs a standard storefront.
• Fanatical — Regular flash sales and bundles, direct publisher licensing for most major titles.
• Green Man Gaming — Long-established, authorized across most major publishers, competitive pricing.
• Gamesplanet — Strong particularly for European-published games.
• WinGameStore and DLGamer — Smaller but reputable authorized retailers worth knowing.

Buying from these stores is effectively the same risk level as buying from Steam or GOG directly. If a key fails to activate, they have customer support with the ability to issue replacement keys.

How gray market keys end up on sale

Gray market sites like G2A and Kinguin are marketplaces. Individual sellers list keys for sale, and the platform takes a cut. The marketplace does not verify where those keys originated.

One well-documented source of gray market keys: a fraudster uses stolen credit card details to bulk-purchase games or Steam gift cards. They extract the keys and list them for sale at below-market prices. The timeline then plays out:

1. The buyer purchases what looks like a legitimate key and redeems it
2. The card’s actual owner notices the fraudulent charge and files a chargeback with their bank
3. The bank reverses the transaction
4. The publisher receives the chargeback and is left financially liable
5. The publisher voids the key — the game disappears from the buyer’s library

This is not rare. Publishers routinely process waves of key revocations. Small independent studios have noted that gray market chargebacks directly affect developer income while also harming the buyers who paid in good faith.

What happens when a key is revoked

When a game key is revoked on Steam, the title is removed from your library with no refund from the gray market platform. Steam cannot reactivate the key — it was flagged by the publisher. G2A and similar sites have buyer protection programs, but their coverage is inconsistent and claims processes are slow.

Some publishers (CD Projekt Red, Team17, and others) have made public statements asking customers not to buy from gray market sources, both because it does not support developers and because of the buyer risk.

CDKeys: the popular middle ground

CDKeys is one of the most-used key sites and sits between authorized retailers and full gray market. Its primary sourcing mechanism is regional arbitrage — purchasing keys cheaply in markets with lower regional pricing and reselling globally.

In practice, CDKeys keys work the vast majority of the time. Revocations are much less common than on G2A. Most experienced PC gamers treat it as low-to-moderate risk for games that have been out for a year or more.

However: CDKeys is not an authorized retailer. Valve has the ability to act against regional arbitrage accounts, and publishers can request revocations if they trace keys to unauthorized resale channels. The risk is currently low but not zero.

Warning signs of a risky key listing

When evaluating any key listing from a marketplace or unfamiliar store, watch for:

• Price is 50%+ below the Steam price for a game less than six months old — new release keys at extreme discounts are a strong red flag
• Seller account was created recently or has few completed transactions
• “Region-locked” warnings — keys may only activate in specific countries
• No refund policy or vague terms
• Payment in cryptocurrency only — reputable retailers accept cards and PayPal

If the price seems too good to be real, trust that instinct.

Practical recommendations

1. Use authorized stores as the default. Humble, Fanatical, and GMG regularly beat Steam sale prices with full legitimacy.
2. For CDKeys: Acceptable for games released more than a year ago. Higher risk for new releases where the key sourcing is harder to verify.
3. Avoid G2A and Kinguin for any game you care about. The pricing benefit rarely justifies the revocation risk.
4. Pay with a credit card if using any unfamiliar source — chargebacks are an option if keys fail.
5. Be especially cautious with new releases. Legitimate keys for newly launched $60 games do not appear for $15 through authorized channels.

When a game hits a genuine price low on a legitimate store, it shows up here. GameHotDeals tracks prices across 30+ authorized stores — check /lowest for today’s all-time lows, and /drops for the biggest discounts from stores you can actually trust.