Not quite agree with your statement. In my opinion, as long as the project have a clear information, team, roadmap, etc., the ICO will not (likely) be a scam. And the ICO is the first step of the project, so it must be a big thing for the developer's team (and the bounty hunters too ). Don't forget to always keep in touch with the developers on every social media, and if the project is good they will often reply to your questions.