Company is real.
Is there a real company behind the email?
Registry and licence, sanctions screening, a company domain instead of Gmail, and no name that is one letter away from a real mill or refinery.
Is the money in a bank, or only in a PDF?
Funds confirmed bank to bank on a number you found yourself. MT799 "proof of funds", leased SBLCs and ICPOs dressed up as money are flagged on sight.
Has this paper been seen before?
Fake ICC rules, prices far below market, and any bill of lading, certificate or account already used in another deal, the pattern behind the biggest frauds.
Does the ship and the box exist?
Container numbers pass ISO 6346, ship numbers pass the IMO check, stock confirmed at source, and an inspector you appoint and pay.
Do you pay before you see proof?
Confirmed LC or licensed escrow only. Upfront fees, advance wires and crypto-only payment stop the deal.