You have to check the project proposal,read the whitepaper if they have strong foundation,review the developers if all of them are legit because many ico nowadays using a picture on internet it is called identity theft,another way to choose bounty is to check their social media accounts ot telegram if they are professional and well mannered when asssisting a customer