You are right. The best way to avoid scam projects is trying to join bounty campaigns from trusted managers.
I agree with you. I have met so many scam projects, although their ICO is very successful, but they do not distribute the tokens to bounty hunters.