Another thing is how can you tell if it has a potential or doesn't have any?
actually it's simple, legit projects always have active developers and also have developments every month, not only that the team also communicates with the community.
Every day or every week as an investor you must monitor every progress, this is very important, so that when the project becomes suspicious you can take steps to anticipate and get out of the project and look for other better projects.
In the beginning, the developers and the team can be very active to communicate with all people in the community, and they still give progress on their project. But in the next few months, one by one of the team and even the developer disappears, and people losing contact with them. The bounty manager will be busy handling and convince the participants and the investors that the project still running. We can see that sooner or later, all of them leave the project without saying anything to people, and they run away with the investor's money. The bounty manager can't do anything because that is not in his control.