I should structure the response to first address the request directly, explain why it's not possible, then offer alternatives and the legitimate way to get the software. Make sure to keep the tone helpful and not confrontational, so the user feels guided towards the right solution without feeling accused.