In my experiences catfishes are pretty easy to read. Catfishes are, by definition, low effort and unsophisticated. They're generally not going to try getting through all your careful investigative loopholes just to mug you when there's more gullible people they can trick.
There's some telltale signs to look for.
The easiest one is that they straight-up use a celebrity as a picture.
Only one picture and it looks too professionally taken, or the one picture is too good looking to be believable. Probably also a stolen picture. Don't be afraid to ask for more face pics, a catfish will of course refuse.
also be on the lookout for scammers. Some guys use very attractive men as pictures, and then will hit you with some story about how they were beat up in another hookup they had. They will then suggest donating to this database for battered victims they set up, and won't want to meet you until you've done it to prove you're a good person. Listen if you fall for this scam you must have an IQ below 70. There's a few variation of this, guys asking you to pay into Onlyfans or other streaming services is another one. Just straight-up never hand any money or card details over to some person you don't know on a dating app, let's be smart here.
how they talk. One word basic answers is a red flag for all kinds of different reasons, but I think it's unlikely a catfish will sit there typing out several long friendly messages with you, again especially if it's their intention to do something terrible to you.
Could be catfish but not necessarily;
Nudes with no face. Possibly, but there's legit reasons for this. I've never sent nudes with a face because I simply don't want pictures of myself out there like that with my face in, but I've also never sent nudes that weren't my own. Some guys might though, look for identifiable markers on their body if possible.
No social media attached. Again possibly, but not necessarily. I don't attach mine because I don't want random sketchy dudes to be all up in my business like a Wendy interview.
More telling is refusal to share socials even after a chat back and forth for a while. That's sus.
If all else fails and you still have doubts, then ultimately don't meet at his house/your house or in any remote place where nobody can see you. Meet somewhere public and very busy for a coffee first. Nobody is gonna try shit with you in a setting like that and, again, someone out to really hurt you generally isn't going to go to all this effort.