How do I securely buy a domain from a private party?
I've used escrow.com a few times to facilitate domain transfers for my organization. You send escrow.com the money, do the domain transfer through your registrar of choice, and once you've confirmed the transfer is complete, they release the funds to the seller. There is some added to cost to doing it this way however.