You have to study first the ICO project carefully, the bounty is linked to the project, so studying the project will show you if it is serious with some potential or just another scam. The whitepaper, the team, the concept, the product, the website, all these factors can show you if the ICO is legitimate or not.
The bounty depends on ICO so if the project is scam then be it the bounty, better to have check carefully the ICO project as well the team. The bounty comes after if the bounty seems to have good rewards too.