I've kind of left ICOs behind. But there are still ways where to know whether an ICO is legit or not. For example the team and whether they have experience with the development of another coin, and thus a reputation. Such a reputation would tell you if you can trust them or not. If it's a new person in the field, then I wouldn't trust them.