When you are the word STO on a project, it does not outrightly mean it is legit. It still calls that you should make proper findings before investing. It is true that STOs are meant to be regulated, but scammers can also proclaim a project to be regulated and the only way you can detect them is by doing research to know where they are actually registered, ask for document backing them up and trace the claim back to the regulatory body or  bodies.