Evaluate the project itself. Is it an actual company? Is it based in a country with rules and regulations that have to be followed? Is the team public and you can confirm their existence? How active are they on social media? What do ICO review sites say about them (take with a grain of salt)? Look at the whitepaper and any other documentation provided. Look at the website, was a lot of time and effort put into it?

Do your homework.