There is something very wrong with Sony holding previous legitimate purchases hostage to force payment of another, small, fraudulent one. That doesn't really sound like it's legal.
Also, why doesn't Sony simply disable the fraudulently purchased item? I'm pretty sure all Sony's software requires on-line activation nowadays.