If you want to find out if the ico is legit always look to the team member if they provide their identity to the public it will be a great indicator that the project will not run after the ico.