Other than reporting the project and the manager in charge of it, there's nothing much you can do, if you didn't catch that in time. If you figured out that it is a scam before actually wasting your time, you could always leave the bounty.