Adding to what people have already said:

- Always look signs like is there typos or false information on their website
- Ask the founders and devs to contact you in Linkedin --> this is very good because if they are not who they say they are they cannot do this!
- You can ask for a video call to confirm identity
- Buying in ICO or in exchange: If you believe in the project after all of your research you should check their private sale and pre-ICO, there is usually discount or bonus tokens for early adaptors. So it really pays off investing in early stage because you might get a really good deal!

Be safe and do your research