This is not new when scammers using my profile but their ether Addrees! Sometimes they get paid cause manager fail to catch them but if found, then reject both user from the project, which is painful. Sometimes team force manager to create new bounty rules! Like "user must leave comment on telegram & annonucment thread" that's totally illegal and crime of thread bumping. User get red trust for follow those rules.
Yes, this happened because the manager and the project team were not careful enough in managing the number of their participants, so the manager rejected both of them, even though only one had to be rejected, but if users have to leave comments on telegram & announcement threads, I think this is too good in order to prevent scammers who often steal data from other bounty participants.