Most of promising ICOs require whitelist and KYC.
You can buy most of the tokens in exchanges without a KYC. For last few months most of the tokens had went below the ICO price after being listed on the exchange.