ICO's is totally legit, but only few of this, So in order to avoid scam ICO's out there you must to take time to read their white paper, understand their project and always ask questions to the team if you have any doubt about the project, and make sure the team behind the project is well experience in this kind of industry.