I think that this is becoming more and more common lately, so what can we do to ensure that responsible people can be punished?
I think the easiest thing to do is to contact the developers before investing or before you decide to participate in the bounty of this project. You need to contact directly by phone, if it is specified or it is best to go and look at the address indicated on the website, is there really such a company. If this is not possible, but create a theme and ask people to find out if there is such an organization or people.
In general, by any means to identify the identity of these people. As soon as we can add personal identification, these people will not be able to just fool us. Because you can write to them in the police under the article fraud.
The most important thing is that today there is everything necessary in order to really find and punish the people who are deceiving us. I think it's time for us to start doing it, otherwise the ICO may die.
If you have any other suggestions, I will be glad to hear them.
Those projects whose team are fair and trustworthy enough usually show some proofs. For example by linking their team members social media accounts and by passing KYC on icobench. Usually in this case project won't deceive people.