A cheap key may work for three months or for three years. What makes the difference is not the price but where the key came from. Answer 8 questions to see which warning signs apply in your case and what you can check yourself.
Almost all “too cheap” keys fall into one of six schemes. None of them is a counterfeit – the key is genuine and actually works. The problem is that it was intended for someone else, and sooner or later the manufacturer notices.
A company buys a license for 500 workstations with a volume discount, uses 200, and someone sells the remaining 300 one by one. Each key is genuine. But the manufacturer sees one contract, not 300 buyers.
What happens. When the contract is reviewed, the whole batch is deactivated at once – often hundreds of keys stop working on the same day, and none of the buyers understand what happened.
Manufacturers sell OEM licenses more cheaply on condition that they stay with a specific computer. A key sold on its own has usually been written off, left over from an unfinished production run or simply stripped from the hardware.
What happens. It works until it is checked. When you move it to another computer or replace the motherboard, activation fails and cannot be restored.
The same product is priced differently in different regions, sometimes several times more. The key is bought where it is cheapest and sold here. Formally, it is the same program.
What happens. Activation is rejected, or the program switches to another region's language and support. Updates come from that region's servers, and local support treats the key as foreign.
Manufacturers give free licenses to schools, teachers, partners for demonstrations and journalists for reviews. They are marked “not for resale” and are technically no different from purchased ones.
What happens. Such a license is revoked as soon as it is detected, and there is nothing to dispute: it was never meant to be sold, so the purchase has no legal basis.
What is sold is not a key but a tool or instructions for restarting the free trial period. The buyer sees a working program and believes they have bought a license.
What happens. The license does not appear in the manufacturer’s account at all – because there never was one. The program stops working after 30 days, and the seller offers to “renew” it once again.
The key is bought officially, but with someone else’s bank card, and immediately resold. It takes weeks or months before the real cardholder notices and gets the money back.
What happens. This is the scheme behind the notorious “it worked for three months and then disappeared”. The original order is canceled retroactively, and the key along with it.
No need to send anything or ask anyone. Everything that matters is visible in your account and your documents.
Every major manufacturer has a personal account where you can see your licenses: Kaspersky – my.kaspersky.com, Bitdefender – central.bitdefender.com, F-Secure – my.f-secure.com, and so on. If the key cannot be registered there, you do not have a license.
Your account shows the exact expiry date. You bought a one-year license but see 217 days – which means the key was activated before you. This is one of the most reliable signs, and it is visible immediately.
If you bought a license for three devices and your account shows that two are already taken by unfamiliar devices, the key is not being used only by you.
Sometimes “Premium” is advertised, but only the basic version gets activated. Your account shows the actual product name, not what was in the listing.
For a legitimate seller, it's a one-click job. For a gray-market one, it's an unsolvable problem, because the invoice would reveal where the key came from. The speed of the response tells you more than any check.
The manufacturer’s website should have a page for that product. If there is none, or it says “no longer available”, the key is most likely a leftover from old contracts. New keys for discontinued products do not appear on the market.
For a private user, the worst that can happen is having to buy a second time. For a company, the same key causes three different problems, and two of them have nothing to do with cybersecurity.
For an audit, a client, an insurer or cybersecurity documentation, a license is proven by a document, not by a program running on screen. A key in an email is not a document.
Without a VAT invoice you cannot record the purchase as a business expense or deduct input VAT. Saving thirty euros and losing the right to a deduction is poor arithmetic.
When a key stops working on a workday, you don't need to prove you're right – you need working protection within an hour. With a seller whose company details you have, it's one phone call. Without one, you have to start the purchase all over again.
If a key does not work or stops working before the end of its term, it is digital content that does not conform to the contract. The seller must either fix the problem or refund the money – and the claim is made to the seller first, not to the manufacturer.
If the seller is registered in Lithuania and has not resolved your complaint, you can contact the Lithuanian State Consumer Rights Protection Authority free of charge; it resolves consumer disputes out of court – vvtat.lrv.lt. You may also seek advice from the consumer protection authority in your country. For cross-border disputes with a trader established in another EU country, the European Consumer Centre in your country (ECC-Net) can provide free information and assistance.
Banks have a chargeback procedure for when goods are not received or do not match the description. It has deadlines, so it is worth contacting your bank right away, not after six months of negotiating with the seller.
The manufacturer is not obliged to compensate for a key bought from someone other than the manufacturer or its distributor. Usually it will explain why the key is no longer valid, and that is where its help ends. Refunds are the seller’s responsibility.
An honest note. Not every cheap key is a gray-market key. The Court of Justice of the European Union, in the UsedSoft case (C-128/11), ruled that a perpetual software license first sold in the European Economic Area may, under certain conditions, be resold – provided the first buyer genuinely stops using their copy.
But this exception does not apply to subscriptions, to volume licenses split into single units, to OEM keys separated from their hardware, or to keys imported from other regions – and that is exactly what most of the few-euro offers consist of. So the right question is not “is it cheap?” but “can the seller tell you and prove where the key comes from?”