Why You Must Purchase an Antivirus Directly From the Developer

Why regional storefronts exist at all

Four forces, none of them arbitrary.

Tax. Consumer software prices include VAT or sales tax at the buyer's local rate, and those rates differ substantially across the EU alone. A single global price would mean a different net revenue in every country.

Local law. Consumer protection, withdrawal rights and warranty obligations are set nationally. A vendor selling into a market takes on that market's obligations, which is easier to manage per storefront.

Support and language. A regional store usually implies documentation, an interface and a support queue in that language. That is a real cost attached to a real service.

Purchasing power. Vendors price to what a market will bear. This is ordinary commercial practice and it is the largest driver of the differences people notice.

What a regional licence actually restricts

This is where assumptions cost money. A licence bought from a regional store is typically tied to that region in one or more ways:

• Activation may be geo-checked, so a key bought elsewhere refuses to activate on a connection outside that region.
• Support is provided in that region's language, through that region's channel, in that region's hours.
• Renewal happens on that storefront, at that storefront's price — which is the part people forget when they optimise the first year.
• Consumer rights follow the seller's jurisdiction, not yours. A dispute is handled where they are.

The practical consequence: the cheapest listing found through a search engine may be a licence you cannot activate, cannot get help with in a language you read, and cannot easily dispute.

This is not speculative. Kaspersky's own blog post on where to buy — “Why it's best to purchase an antivirus directly from the developer”, published 15 January 2018 and read by us on 6 September 2026 — states plainly that “a code for a license specifically designated for South Africa cannot be activated in any other country”. That is the vendor describing its own licensing, not a reviewer inferring it.

Grey-market keys, and why they are the actual risk

Alongside the vendor's own regional stores sits a much larger market of third-party key resellers, and the price gap there is far wider than any legitimate regional difference.

Those keys come from somewhere. Volume, education or OEM licences diverted to consumers. Keys bought in a low-price market for resale into a high-price one. Occasionally keys bought with stolen cards, which are revoked when the chargeback lands — sometimes months after you paid, and always without warning.

The same Kaspersky post is unusually direct about both halves of the consequence. On the key itself: “a pirated code might be accepted by the software but will surely be banned afterwards by an anti-pirate system”. On what happens next: “users who have invalid, fraudulent or 'grey' codes are not entitled to receive any help from Kaspersky Lab's technical support”. Its instruction is to “purchase activation codes only at www.kaspersky.com, from trusted merchants and authorized online distributors”.

That is one vendor's policy and other vendors word it differently, but the structure is industry-wide, and the outcome is not a partial refund. It is software that stops protecting a machine you believed was protected, with no support channel to appeal to.

The rule that avoids all of it: buy from the vendor's own storefront for your region, or from a reseller the vendor names on its own site. A price that is far below every regional store is not a better deal on the same product; it is a different product with a different provenance.

How to tell a legitimate reseller from a key market in ninety seconds

The distinction is not always obvious from the shop front, and the check that settles it is quick.

Start from the vendor, never from the shop. Every major security vendor publishes a partner, reseller or “where to buy” page; if the shop is not on it, that is your answer and no amount of trust signalling on the shop's own site changes it.

Then look at what is actually being sold. A legitimate reseller sells you a subscription registered to you, and the confirmation email comes from the vendor as well as the shop. A key market sells you a string of characters, and the terms usually say so in language about codes and delivery rather than licences and accounts.

Two more tells worth a glance. A price far below every regional storefront is a claim that the seller found an arbitrage no competitor found, which is possible and is usually the diverted-channel case described above. And a refund policy that excludes “revealed” or “delivered” keys is telling you exactly what happens when the key stops working.

None of this makes every marketplace fraudulent. It makes the risk yours rather than the vendor's, and for a product whose whole job is to keep running silently in the background, that is the wrong risk to take to save a modest amount once.

How to choose the right storefront

• Buy the store for where you live and will renew, not where you happen to be travelling.
• Read the renewal price, not the introductory one. A cheap first year on a distant storefront is a decision about year two you have not made yet.
• Check the support language actually offered, not the language of the marketing page.
• Confirm the licence covers the platforms you use. Coverage differs by regional package more often than people expect.
• Check what the feature set is in your region, because bundled identity and monitoring services frequently do not operate outside the market they were designed for — see the Norton tier comparison for how far that can go.
• If you move country, buy the new region at renewal rather than trying to migrate a key.

Kaspersky is a clear example of the pattern, sold through separate national storefronts across Europe — Germany, France, Spain, the Netherlands and Belgium and Luxembourg. Each is the vendor's own, so each is a legitimate purchase — the question is only which one matches where you live and renew.

The honest counter-argument

There is a version of this that is too strict, and it is worth saying so.

Regional price differences are large, they are set by the vendor rather than by cost, and a buyer in a high-price market who buys from a low-price one is not doing anything morally interesting. Plenty of people have done it for years without incident, particularly where activation is not geo-checked, and telling them they were lucky rather than right is condescending.

The answer is not that it never works. It is that the downside is asymmetric and delayed. Saving a modest amount once, against a chance that protection silently lapses months later with no support channel, is a bad trade for a product you buy precisely so you can stop thinking about it. If you are going to take the risk anywhere, take it on software whose failure is loud — not on the thing that is supposed to notice when something is wrong.

The part that is not about price at all

One consideration sits outside commercial terms entirely: some organisations and some governments restrict which security vendors may be used on their systems, on national-security grounds rather than technical ones.

Those determinations are made by regulators and public bodies, they differ by country, and they change. If you are buying for a workplace rather than a personal machine, check your own jurisdiction's current guidance and your employer's policy before choosing a vendor. That is a compliance question, and no consumer article can answer it for your organisation.

For the underlying question of what this software does and where a VPN sits alongside it, see VPN versus antivirus and our antivirus overview. If the answer turns out to be that you may not need a paid product at all, is Windows Defender enough is the shorter route.

About the figures on this page

No price appears here. Regional pricing changes constantly, is quoted in different currencies with different tax treatment, and any figure printed in an evergreen article misleads within weeks. The only quoted material is taken verbatim from the vendor's own published post, with its publication date and the date we read it. Read the current price on the storefront for your own region — that is the only number that applies to you.

Frequently Asked Questions