He's refering to buying the game on g2a, a grey market key reseller that's notorious for using stolen credit cards to obtain the keys it's vendors sell to players. This often results in charge back to the devs who then feel compelled to allow the key to remain valid anyway for fear of public outcry.