for me, first of all , they have to have a working platform down before anything else. good community, strong project idea, available developers willing to take questions and not just get vexed every time a question about the future is asked. Though a project having all these can still be scam, but it is considerably lesser risk by the time you factor in all these requirements.