Buy from an Apple Store or a major retailer. Preferably an Apple Store since they don’t pull any carrier bs.

Check seal on the box. If the two pull tabs are intact (and it’s purchased from a proper store), it should be fine. Never accept the item if the seal is broken.

Check IMEI number. You should be able to enter this onto the Apple website and get a confirmation whether the phone is legitimate or not.