If you ever received unspoofed data, and have a somewhat accurate local clock (rubidium is fairly cheap), you can detect the spoofing.