Whenever a scam can happen. Not only because it is free, but only those who pay can be a scam. For that we must be careful in choosing ICO project. Moreover bounty, lest we just work voluntarily and then not get paid. Some failed projects can be a scam because their target is not achieved.