A Florida woman has been sentenced to 22 months in federal prison for running a large scheme that sold thousands of unauthorized Microsoft software activation keys. The operation involved trafficking Microsoft Certificates of Authenticity (COA) labels and extracting their product keys to sell them globally.

The woman, Heidi Richards, 52, operated an online business called Trinity Software Distribution. A U.S. federal court also ordered her to pay a $50,000 fine after prosecutors proved she conspired to traffic illicit Microsoft software labels between 2018 and 2023.

Authorities said the scheme generated millions of dollars and relied on exploiting genuine Microsoft activation codes that were separated from the software and hardware they were meant to accompany.

What the Microsoft License Fraud Case Involved

According to prosecutors, Richards and her associates purchased tens of thousands of genuine Microsoft COA labels from a Texas supplier at prices well below retail value.

COA labels are security stickers that verify legitimate Microsoft software installations. Each sticker includes a unique product key that activates software products such as Windows operating systems and Microsoft Office applications.

However, federal law prohibits selling these labels separately from the licensed software or hardware package they were designed for.

Instead of distributing the labels legally, Richards allegedly ordered employees to extract the activation codes and sell them independently to customers worldwide.

How the Fraud Scheme Worked

Investigators say the operation followed a straightforward but illegal process.

Key steps in the scheme

• Purchase large batches of genuine Microsoft COA labels from a supplier
• Remove or scan the labels to obtain the product activation codes
• Enter the codes into spreadsheets for tracking and resale
• Sell the keys in bulk to global customers
• Allow buyers to activate Microsoft software without legitimate licenses

Court records show that between July 2018 and January 2023, more than $5.14 million was wired to the supplier to acquire these labels

Understanding Microsoft COA Labels

Many people are unfamiliar with how Microsoft licensing works, which makes schemes like this possible.

What is a Microsoft Certificate of Authenticity?

Feature	Description
Purpose	Confirms that Microsoft software is genuine
Format	Small security sticker with embedded product key
Typical placement	Attached to a computer by OEM manufacturers
Example products	Windows OS, Microsoft Office
Legal restriction	Cannot be sold separately from licensed software or hardware

COA labels are designed to ensure that every activation key is tied to a specific legitimate software license.

Separating the key from that licensing structure creates an unauthorized secondary market for activation codes.

Why Standalone Product Keys Are Illegal

Activation keys themselves may appear legitimate because they originate from genuine labels. The legal issue arises when they are detached from their authorized distribution channel.

Federal prosecutors explained that the only legitimate distribution methods for these labels are:

• Attached to a computer where the software is installed
• Included inside a sealed OEM software package containing the license

Selling the labels or product keys separately violates federal intellectual property and fraud laws.

Timeline of the Fraud Operation

Year	Key Event
2018	Scheme begins with large purchases of COA labels
2018–2023	Employees extract activation codes and sell them worldwide
2023	Authorities identify and investigate the scheme
2026	Federal court sentences Richards to 22 months in prison

Investigators say the case demonstrates how gray market software licensing can generate large illegal profits.

Agencies That Investigated the Case

The investigation involved several federal agencies and prosecutors specializing in cybercrime and intellectual property violations.

Law enforcement involved

• Homeland Security Investigations (HSI)
• U.S. Department of Justice
• Computer Crime and Intellectual Property Section (CCIPS)

Federal officials say CCIPS has secured more than 180 cybercrime convictions in recent years and helped recover over $350 million for victims.

Why This Case Matters for Businesses

Software licensing fraud is a major issue for technology vendors and corporate IT departments.

Organizations that unknowingly purchase unauthorized activation keys may face several risks:

• Compliance violations
• Unexpected license audits
• Software deactivation
• Legal liability for intellectual property violations

Businesses are increasingly advised to obtain software only from authorized vendors or certified resellers.

Key Facts About the Case

Detail	Information
Defendant	Heidi Richards
Age	52
Business used	Trinity Software Distribution
Fraud method	Selling extracted Microsoft activation keys
Total supplier payments	$5,148,181.50
Prison sentence	22 months
Fine imposed	$50,000

FAQ