Old advice, but probably still true: Either buy from legitimate vendors or pirate it. Buying from shady sites creates extra work and costs for developers.
If you can’t afford or don’t want to buy our games full-price, please pirate them rather than buying them from a key reseller. These sites cost us so much potential dev time in customer service, investigating fake key requests, figuring out credit card chargebacks, and more.
— Rami Ismail (@tha_rami) June 30, 2019
https://www.techdirt.com/2019/07/09/indie-publishers-tell-gamers-to-pirate-instead-buying-keys-through-reseller-g2a/