Yh it is a hard one, I usually check out the team and make sure they're all respected people in the crypto community, that's usually a good sign a project is legit. Also if they have a working product, 95% of ICO's fail so if they're not paying out its probably because they're going under. I found a good project recently, Plutus have a live beta product, they recently did a hacker bounty and paid out $6000, and they are currently running a giveaway just for joining their Telegram https://t.me/plutus_group I much prefer these low entry requirement types than having to sell my soul posting.