Indie game devs are bombarded with free game requests.

I read about one indie dev who woke up to a dozen emails a day asking for a game key to "twitch stream" their game.

It becomes extremely exhausting to verify every single one, and so many just hand it off and hope that one emailer really is who they say they are and they suddenly get a shitton of sales.

To add to that, if they are using stolen payment info, then they'd probably have no qualms about stealing yours too