Check the company, the team, if they go to conferences, if they are active, supported by strong advisers. Then you make sure bounty will be organized and also money paid in time. Companies that don't care are not worth investing in.
You should have enough experience to indicate correctly if there's a scam or not, because scammers are too good nowadays.