IIRC, Yubikeys support some form of attestation. You could use this to determine whether or not the Yubikey was a genuine one from the Yubico organization.