Well, they might be able to tell by the song's ID3 tag. A lot of people who download music off P2P don't have their songs named correctly, while legit songs COME with the proper tags.

Ex. Legit = Artist: Pink Floyd Song: Brain Damage

Non-legit= Artist: <blank> Song: pink floyd - braindamage

You know what I mean.