Unfortunately, there is no universal advice on choosing an ICO project. ICO ratings of projects should not be trusted, they are sometimes paid. I try to go into those projects that have already collected the minimum required amount. I choose platforms that already have a product that works (real business, etc.).
However, even this does not save more and more from fraud. Now a new type of fraud is widely distributed among ICO teams - the announcement of a KYC audit after the completion of ICO. It is carried out for the purpose of non-payment to us earned tokens and therefore it is very difficult to pass, and sometimes impossible. Therefore, the project will work, we advertised it diligently and in good faith, but we will not see the earned tokens.