I think the easiest thing to do is to contact the developers before investing or before you decide to participate in the bounty of this project. You need to contact directly by phone, if it is specified or it is best to go and look at the address indicated on the website, is there really such a company. If this is not possible, but create a theme and ask people to find out if there is such an organization or people.
At the moment, it is almost impossible to find scammers and the police rarely take up such cases.
This method will not help everywhere, if the project is created by professional scammers, they will think through all the details and you will be deceived.