Many bounty projects are existing which will give a profit when the project ends. But how can a bounty participant assures that the project is legit? What will be the legal actions of bounty participants if their project is scam, such as thier work has not been payed?
The first thing to do is to check the background of the people running the ICO so many projects are posting fake profiles of the devs, second check if the ICO has a good potential in the market, bear in mind if the project failed to reach to reached the softcap you are likely not to get paid, it's still a gamble participating in bounty.