I'd say the VIN tag was removed when the dash was painted; that's not the factory suede finish on the dash.
Might not be anything nefarious going on, but those rivets/nails/whatever are definitely not correct.
As Barry says, I'd sure want to confirm it's a legit car.