Nobody is claiming they are selling stolen keys. Dont go putting words in my mouth. Selling outright stolen goods is BLACK market. Selling non stolen yet not entirely legit goods is grey market ie. selling Russian cdkeys in the US/EU because of the massive difference in currency values, thats grey market.
If they are selling Russian keys in the US market, didn't CDPR get the money when the Russian keys were bought?
There are only two ways that I know of, technically, that CDPR would not get ANY money:
1) stolen keys
2) literally fabricating them