There are also people who contact publishers pretending to get free review copies and in turn sell the codes they got. Some studios catch this and if the code is used by another user, that account could be banned or they could lose access to the game completely. I've heard where people have lost games they legit paid for from key sites, because the codes came back stolen later on.