Firstly, I always see who open that threat, official fresh-account or manage by old-account bounty manager. Then I look at their content, how detail and compact the information they give. Is there any weird thing. I usually observe first about 1-2 days before deciding to fill up the form. And be careful before fill the form. Now, I always consider if they show the spreadsheet publicly.