Abstract: Methods and apparatus for performing a user challenge are disclosed. An example computer-implemented method includes receiving, at a server, a request, including a set of login credentials, to access an online service of the server and verifying the received credentials. In the event the login credentials are invalid, the request is denied, and, in the event the login credentials are valid, a challenge is provided to a user that provided the login credentials. The challenge includes: requesting that the user identify a geographic location of a previous successful login; receiving a response to the challenge, the response including a user provided geographic location; and determining if the challenge is satisfied by determining if the provided location is within a threshold distance of a previous login location associated with the user credentials. If the challenge is satisfied, the request is granted. If the challenge is not satisfied, the request is denied.