I was just contacted by a project by DM in Telegram asking me to join their bounty program because they have seen me participating in other bounties. Is this even "legal"? I mean, aren't all of ICOs and projects supposed to not message first? A probable scam?