You should look for the project's legitimacy and team. ICO ratings are sometimes legit too but you should be careful because some of them are paid so that they could get high ratings. Bounty manager could be a factor too. Btcltcdigger is one of the bounty manager that I recommend to you. He don't accept scam bounties so a chance of being scammed is less than the other bounty manager.