Only their website. But how accurate and trustworthy can a website be?
Head over to the
Scam Accusations board to see just how many projects display fake teams and fake information on their websites. A flashy website can be built in an hour or two and be full of completely false information and pictures.
As you mentioned, everything is easy to fake - Facebook, Twitter, Telegram, Reddit, Linkedin, etc. It is trivial to set up pages on all these sites and fill them with fake investors.
Perhaps the best idea is to just stay away from ICOs altogether. The vast majority are scams or trash.