Just take a look at the manager first, he/she have to a trusted ones.. and then you go to do some research about their project/product behind the ico, the dev teams and also their roadmap. How and when they will distributes their rewards and if the rewards were just too big or unlogical then you should be more alert about the bounty