there are two ways to change the owership:
1) push, this one you need the money first. There is no auth code involved.
2) transfer to another registrar. This one is questionable whether you get money first. If you give the auth code first and then the buyer does not pay, then you may still have the time to reverse the transaction. However this is very risky.