yes youre right it is very hard to detect if the project you are entering are scam or not , we always take risk ... just be carefull who are you talking with. and dont entertain tjose personal messages with unknown links , cause we dont know if this link is gathering some information about our account.