Is CDKeys Legit? The Hidden Risks of Gray Market Game Keys
CDKeys works, in the sense that matters most to the large majority of buyers: real keys, genuinely unused, activating fine in the overwhelming share of orders placed. What it isn't is a publisher-authorized retailer for the games it actually sells, and that single fact explains almost everything else genuinely worth knowing here before you decide whether to buy from it.
Three separate questions people tend to mix into one
Does it work? Yes, according to long-running community discussion across Steam forums and various gaming boards, which consistently describes CDKeys as reliable, with delivered keys that activate completely normally on the first attempt.
Is it legal? Also yes, specifically for the buyer. Purchasing a gray market key isn't illegal under any current law, and CDKeys operates as a properly registered business sourcing its inventory through wholesale or regional distribution channels rather than through anything resembling theft.
Is it authorized by the publishers themselves? No, and this is the actual distinction that matters. CDKeys is not an official reseller. Its keys are often sourced from regions where publishers deliberately price a game lower, then resold in markets where the official price runs considerably higher — which is precisely what "gray market" means in this specific context, as distinct from the genuinely illegal "black market" of stolen or fraudulently obtained keys.
Where the actual risk sits
Not that the key fails outright when you first try to activate it. It's that a small share of any gray-market inventory can, in rarer cases, be traced back to fraud further up the supply chain — a key originally purchased using a stolen credit card, for instance — which gives the original publisher legitimate legal grounds to revoke that key even well after it's already been activated on your own account. This outcome is genuinely uncommon in practice, according to reviews compiled by Windows Report's 2025 buying guide on the platform, but it's the one meaningful way a CDKeys purchase differs from buying the same title directly through Steam or through an officially authorized partner storefront.
Community reports consistently separate CDKeys from marketplace-style gray market sites like G2A or Kinguin, where many individual third-party sellers list keys with far less consistency and far less accountability behind each listing. CDKeys sells its own inventory directly rather than hosting a rotating cast of outside vendors on its platform, and Digital Citizen's 2026 review of the site points to this as a large part of why CDKeys is generally regarded as noticeably more reliable than marketplace-model competitors, even though neither type of site technically counts as an authorized retailer.
What to check before you buy
Cutting your own risk further
Check for region restrictions on the specific edition you want before buying at all — some of the cheaper keys available are locked to a particular country or platform region and simply won't activate anywhere else, regardless of how the listing itself is worded.
Keep your original order confirmation and the key code on hand until activation is fully confirmed, since a revoked-key claim down the line is far easier to dispute successfully with that documentation readily available.
Pay by card rather than an untraceable method, so a genuine dispute path stays open if a key doesn't work as expected or ends up getting revoked later on.
Buy keys specifically, not full account logins. Sharing an account with a complete stranger for a "cheap" game carries a meaningfully worse risk profile than simply buying a standard activation key does.
Before trying any gray market seller
The problem with gray market key sites specifically is that reputation doesn't generalize the way it would for an ordinary retailer — CDKeys being reliable tells you nothing concrete about the next site that looks almost identical, uses the same layout conventions, and undercuts CDKeys' own prices by another 10%. That's exactly the gap WebVouch is meant to close: instead of assuming a new gray market seller is fine because CDKeys turned out fine, you get an actual read on that specific seller's history with revocations and delivery.
Check WebVouch first, whether it's CDKeys specifically or a newer competitor you haven't used before:
- recent buyer feedback pulled from more than one independent source, not just the seller's own hosted reviews, which a dishonest gray market operator has every incentive to curate
- specifically whether recent reports mention key revocation or delivery problems, rather than just general satisfaction with the checkout experience, since revocation is the one risk that's genuinely specific to this category
- the same check repeated for any competitor site — CDKeys' built-up reputation genuinely doesn't transfer automatically to other sites that merely look similar, and treating "looks the same as CDKeys" as a trust signal is exactly how buyers end up burned on a copycat