the best way to understand if that is not a scam is to read all the documentation and try to connect with the team
but sometimes as a bounty manager holder, they need a new account that is usually tailored to the name of their project, but there are also still using the old account that has been used frequently.
but I think that's what matters most about the project, promising or not.
I hope this helps good luck on your bounty hunting