pig in a poke

(idiomatic) Something whose true value is concealed or unknown and may be lower than expected by the buyer or claimed by the seller, especially something offered for sale.