Length of a bounty is not really relevant, it's all about the quality of a project. There will always be a risk that it may not work out, even if a project isn't a scam. Just don't get involved with every bounty on offer, be selective and read up on the project before getting involved to reduce the risk. You should get an overall positive response, even if some end up being worthless.