hook_entity_update cancel
The right hook for this job is hook_field_attach_validate().

(As implemented by the Field Validation module, which may also do what you want.) 

hook_entity_update() actually fires after the entity and all fields have already been saved (in the case of nodes, at least).