Also, there's the risk of phishing or malware. If someone offers a free CD key through an unauthorized site, they might be stealing personal information or delivering malware. I should warn the user about that to protect them.