I didn’t know this, and I recently bought a key through one of those sites. Put in my card details at checkout and got the key, and got a message from my bank saying the transaction has been declined due to security reasons. So my money never ended up going to them, but I still got the key. I unknowingly scammed the scammers!