Investors and bounty hunters are mostly required to undergo KYC while the team behind the project itself are not known. And they scam people. I suggest the team should first pass a "KYC" test and publish it on their website before investors and hunters are also made to do same. What do you also think?
As far as i know, KYC stands for know your customer not know your company. If you have doubts with the company you are joining for bounties then dont hesitate to turn back on it. The answer is common sense. If you know and its obvious that its a scam then dont join in it. End of story. They will not make much effort like creating a website etc if they are exist just to scam people.