This is not a bogus phishing scam. I was a little leary, so I created a new Windows Live account on an email I never use. Sure enough, you do get a key. I actually submitted Afghanistan as a second choice and it gave me another key. After that, it wouldn't give me anymore. I installed and activated Vista last night just fine. No SLI in Vista yet, so I'm glad I put it on my spare drive.