It's sophisticated money-laundering. How it works is that russian cyber-criminals steal credit card numbers. Before the cc# are invalid, they buy digital versions of games and get the passkey. As time is of the essence, they sell it cheap and the buyer (like you) give money to a criminal.
This is why I prefer a disc-version and the fact I like having something physical.