So I have a .org domain and someone contacted me offering to sell me the .com variant, saying the transaction would take place over dan .com

I couldn't verify the owner of the .com I would be purchasing but I know there is no live site for the .com and I'm just wondering, how do I make sure I'm actually purchasing the domain that I would want?