Yup, KYC is a pain in the ass. Gladius project just announced that they need it for all bounty participants. Ofcourse scams happen in the crypto world, but you also have to look at the devteam, and the project itself before deciding on if you want to go trough with it.