Yes that is a risk, there are some good icos around but taking into account that most of those projects are scams that are never going to become successful at all then I will probably avoid sending any kind of documentation to them this mean that you'll probably be unable to join many bounty projects out there but in my opinion your personal information is a lot more valuable than just a bunch of tokens.