KYC for bounty hunters is a common thing now. This is not a sign of a scam, moreover, many of the ICO warned about this in advance.
Giving personal data to a project that cannot be said to be successful when it is launched I don't thing is a good idea. I prefer to look for another project bounty that doesn't have to provide us with identity information.