This is not new when scammers using my profile but their ether Addrees! Sometimes they get paid cause manager fail to catch them but if found, then reject both user from the project, which is painful. Sometimes team force manager to create new bounty rules! Like "user must leave comment on telegram & annonucment thread" that's totally illegal and crime of thread bumping. User get red trust for follow those rules.
Some very basic precautions can prevent this type of scamming. Experienced campaign managers always ask the users to put their ERC-20 address on the "Location" section of the Bitcointalk profile. This measure takes just 2 seconds and it surprises me that there are campaign managers who don't bother about it. Anyway, imposing a blanket ban is always time saving than identifying the potential cheaters.