Some solid tips in the first post, that is for sure. I tend to gravitate towards being especially careful when it comes to the "team" section on the websites. If they provide their real pictures, their LinkedIn profiles in which it is stated that they are indeed linked to the projects etc. If there are no red flags there, there is a much smaller change they will pull a blatant scam as that would maybe reflect on them in their personal life as well.