It seems to me that before you contact with such projects, you need to check their audit reports. Some companies are doing this quite successfully.