Right now, it seems that people are taking things on trust, buying only from digital artists who have very active online presence, and whose social media accounts are presumed to be true representations of the artist.
Nobody is running what I would consider to be a robust system for verifying digital identities for signing NFTs.