The first thing that you need to research or investigate is their team and not the project or whit paper because White paper and project do not scam but people do. Verify if they really are real person or if they really are involve in the project and not a stolen identity. Many scam ICO only  use stolen Identity and change its name. Project, white paper and roadmap is just a secondary after you verified that the credibility of the team is legit.