Many bounty projects are existing which will give a profit when the project ends. But how can a bounty participant assures that the project is legit? What will be the legal actions of bounty participants if their project is scam, such as thier work has not been payed?
From my experience for 10 months doing bounty, you cannot tell whether the project of that bounty is legit or not because some of ICO projects that are legit but don't have enough funds will results to termination or discontinue due to not enough collected funds. Some who are really scam projects have also a great websites, platform and other marketing materials that will attract investors. But you can avoid the other scam projects by doing intensive research on their background.