The very fact that a wallet.dat might be offered for sale, or, "help me unlock it and I'll pay you BTCBTCBTC" might in itself be a big neon light that the wallet.dat is either fake, or has been forged.