scam is always expected in emerging market, in this case ICOs. Just be careful on selecting an ICO where you would spend your money, and for bounty hunters, your time and effort. The key is to conduct some research, review their projects, whitepaper, roadmap etc. also look for trusted managers they surely manage a legit ICOs.
It's too hard to avoid ICO scam, Agree with you about must do your own research and read project whitepaper/roadmap, if you found that no clear roadmap, weak website and whitepaper, telegram don't have active admin or admin just spam a lot of message about ICO offers, please avoid to join this types ICO, last message for investor newbies, don't invest in ICO or maybe you'll lose all your money