When it finishes synchronizing you'll see the coins, don't worry.

Yes, generate a new address for every received transaction, that way it will be easier for you to keep track of who paid you what.
Only deal with trusted sellers, the ones with good reputation, remember.