To anyone considering doing this deal with OP i'll double check the tokens contract, as the op may try to sell you fake tokens.
I suggest to check this also, coz there are instances that some
seller so-called seller/dev make a new contract and named it with some existing tokens. Which is actually I'm one of the victim of those people. So watch your step and double check things first before releasing funds.
Even i was a victim of such a scam. This is truely a serious problem but indeed checking contract address can solve this issue.