Quick answer: Gray-market resellers (G2A and kin) sell keys they didn't get from you — often sourced from giveaway scams, region arbitrage, or stolen-card purchases that later turn into chargebacks you pay for. You can't shut them down, but you can starve them: tight key hygiene, curator-connect-only review keys, and never treating their listings as 'free sales'.
Gray-market resellers (G2A and kin) sell keys they didn't get from you — often sourced from giveaway scams, region arbitrage, or stolen-card purchases that later turn into chargebacks you pay for. You can't shut them down, but you can starve them: tight key hygiene, curator-connect-only review keys, and never treating their listings as 'free sales'. That's the short version — the sections below get into the how, the why, and the mistakes worth dodging.
Where gray keys actually come from
The supply chain is mundane: keys harvested from bundle promotions, fake 'curator' and 'press' requests, region-priced storefronts, and — the ugly one — keys bought with stolen cards, which sell fine until the chargeback lands on the original storefront and sometimes on you in fees and metrics. None of it represents a sale you'd otherwise have made at full price.
The famous dev complaint is accurate: a pirated copy costs you nothing, but a stolen-card key sold on a reseller costs you a chargeback. Piracy is lost hypotheticals; gray keys are real negative revenue.
Hygiene that actually starves them
Generate keys sparingly and trace-tag every batch (press, giveaway, bundle) so leaks identify their source. Send review keys only through Steam's Curator Connect, treat unsolicited 'press' key emails as scams by default, and cap giveaway volumes — hundred-key giveaways are reseller restocking events.
Steam's own tools help: you can revoke key batches that leak, and watching redemption patterns (a 'curator' redeeming many keys, instant resales after a giveaway) tells you which channels are compromised.
Don't fund the marketplaces
Reseller sites profit from listing fees, buyer insurance, and volume — your moral leverage is small, but you control your own behavior: don't buy placement, don't shrug them off as exposure, and educate your community gently ('keys from resellers may be revoked; here's where buying actually supports us').
Regional pricing tightens one valve: sane regional prices reduce the arbitrage gap resellers exploit, which is one more argument for setting them deliberately rather than auto-converting.
Cheap experiments beat expensive certainty
Most business questions in indie development — price, platform, publisher, marketing spend — can be tested small before they're answered big. A two-week itch.io experiment, one festival demo, or a single contractor invoice teaches you more than a month of forum threads about what other people's games did.
Treat every irreversible decision with suspicion and every reversible one with speed. The studios that survive aren't the ones that guessed right the first time; they're the ones that made their guesses cheap.
Protect the downside first
Indie game revenue is lumpy and unpredictable, and most advice quietly assumes a hit. Plan for the median outcome instead: a launch that earns modestly and grows slowly. Keep fixed costs low, keep some runway, and make deals you could live with if the game sells a tenth of your hopes.
None of this is pessimism — it's what lets you take real creative risks. A developer who can afford to miss is a developer who can afford to be interesting.
Plan for the bugs you won't see coming
Whatever else you take from this, build yourself a way to hear about problems. Once your game is on other people's machines, most failures happen out of sight: the crash on hardware you don't own, the save that corrupts once in fifty exits, the bug players mention in a review instead of a report.
A lightweight crash and bug reporting setup — even just Bugnet's free tier wired into your engine — turns that silence into a fixable list. The devs who look calm at launch aren't luckier; they just see their problems earlier.
Putting it to work
Don't try to act on all of this at once. Pick the one change that costs you the least and pays the most this week, do it, and see what actually happens before reaching for the next.
Most of this rewards steadiness over intensity. A small improvement made every week, checked against how real players respond, outruns any single burst of effort — in this corner of game development and every other one.
Make the guesses cheap, the agreements written, and the runway longer than the plan.