You can, depending on the circumstances, sue for damages beyond the sticker price, but those tend to be harder to prove (e.g., lost profits) or are generally disfavored (e.g., punitive damages).
More generally, a point that is being overlooked here is that, generally speaking, private parties cannot file criminal charges. The government files criminal charges. The government has discretion over whether they want to actually follow through on reported criminal conduct. And they often won't, for good reason (e.g., doesn't look like there's enough evidence, not enough resources on hand (or resources better spent elsewhere)).
Your personal opinion on whether "ruin[ing] a couple people's lives" is a proportional response to duping aside, you don't think this makes a company nervous? What kind of player wants to stick around in a game run by a company that has clearly demonstrated they are perfectly happy to ruin your life? Suing your own customers is generally a bad idea, from both a PR and business perspective.