Don't be afraid to join @avivii's bounty, because joining a bounty program is an easy way to get tokens. You only have to read the whitepaper and check the website and the team that joined the project. If you do that, you have a high chance of identifying that the program is legitimate or not.