the first thing i control on an ICO is the team.
who has a fake ICO tends not to post any update about the team, with no links to profiles like linkedin, facebook or so on
the second thing i see is the whitepaper and the quality of the project. the scam ones tend to be vague.
the third thing is the communications of the team, the time to respond to questions and so on.