Before participate in bounty campaign - do some research about project (team, media activity, wp). Also check bounty manager trust. And then make your decision.
I agree. Before I join, I make a research about that campaign. If it is legit. If you join and the spreadsheet is updating, I think this a good bounty campaign. And I agree that you should make a research if the bounty manager has a no negative trust.