It can happen, that after ICO of a scam project the 'managers' just disappear with the collected money and they won't give you any tokens... It is the risk of the bounty program, but you should be aware of this.
Best is if you speak with the company before advertising their ICO. More or less you can decide if it is scam or not..
It is worse if you invest into scam project. Than you loose your money, during the bounty you just loose the invested time.