I'm usually check their ANN thread first. If they describe their token with proper details and good explanation, then i can say it's legit. Another sign if the airdrop is fake, they usually need to fill your private key in the form.