You are right. The best way to avoid scam projects is trying to join bounty campaigns from trusted managers.