Scam projects are "getting better" from time to time, and so it is really hard to detect them sometimes. Of course there are signs, like unrealistic promises, fake followers. Maybe it is also a good idea to type the name of the ICO, and the word scam to google, and see if there is any result.