Is It Legal to Sell Windows and Steam Keys?
The question sounds like it wants a yes or a no, but the honest answer is shaped differently: what governs your position is not the act of reselling itself, but the licence type, the jurisdiction, and where the batch came from. What follows is a breakdown of the mechanisms at work, without presenting any conclusion as settled law. This is not legal advice — your specific situation needs review by a qualified adviser under current local law.
A key is not goods — it activates a licence
The first distinction reframes everything else: you are not selling software or a "digital good" in the ordinary sense, but a string that activates a grant of permission to use.
The legal structure typically works like this:
- The rights holder retains exclusive rights in the underlying work — the program or the game.
- The user receives a licence, meaning a limited right to use it under stated conditions.
- The key is the technical instrument binding a specific licence to a specific account or device.
This diverges sharply from intuition. When you resell a book, you transfer a physical thing you own. When you resell a key, the real question is different: is the licence itself transferable, and on what terms? That is answered by the licence agreement plus applicable law, not by common sense about ownership.
Exhaustion doctrine, and why it is contested for software
Exhaustion of rights — the first-sale doctrine in common-law terms — broadly means that once a copy has been lawfully sold, the rights holder no longer controls its onward movement. For a printed book or a boxed disc, the mechanism is intuitive.
For digital copies it gets considerably harder:
- There is no physical copy changing hands — transfer effectively creates a new copy while the original is supposed to be deleted.
- Jurisdictions differ on whether exhaustion reaches software distributed by download at all.
- Time-limited licences and subscriptions sit even less comfortably with exhaustion logic than perpetual licences do.
- Case law is uneven and still developing, so a position that holds in one legal system for one licence type does not transfer automatically to another.
The operator's takeaway: do not build a business model on the assumption that exhaustion automatically covers your situation. It is a contested area, not a settled baseline. Adjacent risk mechanics are covered in the article on the risks of reselling digital codes.
Licence type matters more than the act of resale
This is the fork most people skip. Keys look identical; the licences behind them are not.
| Licence type | How restrictions usually work | What to verify before buying |
|---|---|---|
| Retail | Generally the most freely transferable | Rights holder's current terms |
| OEM | Typically tied to the hardware of first activation | Documented confirmation of type |
| Volume / corporate | Granted to an organisation by contract, transfer limited | Whether redistribution rights exist |
| Education / NFR | Issued for a defined purpose, commercial trade restricted | The specific programme's conditions |
| Promo and bundle keys | Campaign terms often prohibit sale outright | Rules of that campaign |
The point of the table is not to hand you a verdict per row — terms vary by product and change over time. The point is that "is it legal to sell keys" is an incomplete question until the licence type is named. A batch carrying transfer restrictions does not become unrestricted just because you bought it from an intermediary in good faith.
Two separate layers: platform terms and statutory law
These get conflated constantly, and it costs money.
Terms of service form a contract between you and the platform or rights holder. Breaching them produces contractual consequences: account suspension, code deactivation, withheld funds, termination of the relationship.
Statutory law is a distinct layer: copyright, consumer protection, tax regulation, unfair-trading rules.
Two asymmetric situations follow. Conduct can breach platform terms without breaking the law. Conversely, conduct that is contractually permitted can still create problems on another basis, such as tax treatment. Operationally, what matters is that the contractual layer bites faster — a trading account can be frozen in days, long before any legal question is ever litigated. The broader framing is covered in the article on the legality of reselling game keys.
Regional licensing is a separate question
Region restrictions are not the same thing as a resale ban. They are a condition defining the territory in which the licence is granted for use.
Selling a key outside its intended region typically creates three problems at once: the buyer cannot activate the code and opens a dispute; the rights holder may treat it as a breach of terms; and the regional price gap that motivated the trade gets consumed by refunds. The mechanics are set out in the explainer on region-locked keys.
Provenance is what really drives your exposure
If you take one thing from this article, take this. Your practical vulnerability is determined less by contract wording than by where the keys came from.
A key funded by a stolen card somewhere upstream stays tainted regardless of your good faith. The rights holder deactivates the batch, your buyer disputes with you, and you can only recover from your supplier what was agreed in advance.
What actually reduces exposure:
- A short, transparent chain from the rights holder or an authorised distributor.
- Documented provenance — invoices, contracts, written confirmation of licence type.
- Pre-agreed revocation terms — replacement windows and compensation procedure settled before the first purchase.
- A proper legal entity and correct tax treatment — covered separately in the guide to tax and VAT for digital-goods distributors.
Incident handling is set out in the article on code revocation and region locks.
Where to source inventory with a clean chain
The wholesale channel solves exactly the problem described above: it shortens the distance between the rights holder and you, and makes batch provenance verifiable. FoxReload operates as a wholesale digital-goods supplier — a catalogue of 900+ SKUs (game keys, gift cards, top-ups, eSIM, software licences), a single REST API, automated delivery, and multi-region SKUs so you can match a product to the right region rather than sending the wrong key to the wrong market. The economics around this are covered in how the key-reselling business model works.
What to actually do
Assemble the facts before deciding anything: which jurisdiction you operate in, what licence type your inventory carries, what the rights holder's current agreement says, and how documentable your batch provenance is. Take that package to a qualified lawyer — the specific legal position, tax treatment and applicable rules must be verified against current local law rather than inferred from general reasoning.