Make sure the seller at least gives you the account login (and verify it's the correct one) before paying him/her!
RuneScape accounts are fairly easy to recover if the original owner attempts it. While there's almost no way to stop the owner from recovering the account back after selling it to you, you can make sure that no one else on this site (if not other sites) purchases the same account and gets scammed like you were!
This is a thread containing a list of all the usernames (usernames