At a legitimate website, the developer(s) and publisher(s) make money for each key purchased and every key is legal to own, so there is little chance of a key being revoked and your account banned on your chosen storefront. At a grey market seller like G2A, they can sometimes get their keys illegally (credit card theft, stolen accounts, etc.). So because GMG, Fanatical, Humble, IndiaGala, etc. are all legitimate resellers, they buy their keys directly from the source (usually the publisher or storefront where they are redeemed, but that’s just my guess). Apologies if that’s not what you were asking.
At a legitimate website, the developer(s) and publisher(s) make money for each key purchased and every key is legal to own, so there is little chance of a key being revoked and your account banned on your chosen storefront. At a grey market seller like G2A, they can sometimes get their keys illegally (credit card theft, stolen accounts, etc.). So because GMG, Fanatical, Humble, IndiaGala, etc. are all legitimate resellers, they buy their keys directly from the source (usually the publisher or storefront where they are redeemed, but that’s just my guess). Apologies if that’s not what you were asking.