investing in cloud mining is ever riskier than gambling, specially if you are a newbie. Most of them are ponzis, and with the low price and the uncertainty about the next bitcoin fork, the profits for the legit ones are at best uncertain.
It depends on the site. Some are legit others are not. You really need to research before investing in cloud mining.
If they sound to good to be true stay away, some will post info that makes them sound amazing. I wont mention the name of one paticular one. But do the math it is better then possible. That makes it most likely a scam/ponzi. Look at fees one is so bad they don't even list fees but brag about people ROI'ing on it.
But most them are ponzi and I guess with the low payout from that mining it will make them a legit compare to others that pay a lot like to good to be true. So better do some research like you said or may be you can stay away from mining and just do signature campaign and trading. Its better and safer than mining