All investments have a level of risk - it all depends on the project. Real-world use cases, roadmap, developer/leadership team, levels of activity, advisors, technological innovations etc.
Of course, you need to analyze a lot of information, but it seems to me that you still get 100% and you will not receive a guarantee, even if you make an analysis of all technical documents and even check the team and whom the company is. Anyway, there is a chance either to contact scammers, or to get a not promising project.