Kaspersky surely has methods to check which type of key he is selling. Why not buy his key for RM10 and submit to the relevant authority for tracing where and how he gets the keys. RM10 is cheap to kill a suspicious competitor anyway. Simple as that.