Check the flat matches what you were shown, confirm the rent, deposit, notice period and move in date in writing, and get a signed receipt for the token itself, stating it will be adjusted into the deposit. Ask what happens to the token if either side backs out, since this is rarely written down unless you ask. Never pay a token in cash without a receipt.
Sources
No outside source: this is how the practice works, in words, with nothing to cite.