There are projects that don't pay even investors for 6 months. I'm not even talking about bounty. Some finish their own platform, test, fix bugs. You just have to wait until the developers have completed and released the coins. Not necessarily your project is a scam. Since you didn't name the project.
The only advice that I can give you is to pay attention to company managers. Bounty managers with a good reputation close bounty company with the first red flags and warn the participants about the problems. Good luck to you.