You must doing a research personally and ask for someone advice about such bounty program. You need to see the solidity of the team, the activity of the team, read what the purpose of that project and check every their member profile, make sure they are real profile not fake. Look at the manager of that bounty, how the way to managing bounty campaign and kick the scammer.