There are projects that is an obvious shit and there are good projects that will show good characteristics at first and then later on will eventually turned into shit. That's how risky joining bounty programs so better be cautious and understand the risks. As much as possible research on any kinds of useful resources such as ICO ratings website, Google search etc.
About your payment concerned on a specific bounty, did you already read the terms about bounty payment e.g via team or bounty manager? or even read the latest annoucement about it? You must know that first because maybe you might not informed yet.
Yess, i agree with you, sir. There is no guarantee about legit or not of bounty program, even we have feeling and the project show the great value. Because there is always have this risk as you said.
But my sugestion to TS to follow manager or bounty hunter who have good experience and the trusted one. This is also my way to find and join bounty program.
Cheers!