Aside from that, I think every bounty hunter must do a little bit of research about the project and its core team's identity. Also there are a handful of steps as listed below that I think one should do first in order to verify the integrity of a project and steer us away from possible joining a scam project.

1. Verify project's viability
2. Verify core team's identity
3. Check if they have a working MVP already
4. Check repository activity
5. Ask related questions on the project's social media channels, etc...

If we do these things, there is a high possibility that we could en counter some red flags and should already be doubtful about it and avoid it that particular project. In this way, we will not be wasting our time and should discourage possible scammers from doing such awful acts.