Similar Items: Anti-spoofing using challenge-response user interaction