Yes, I agree. It is indeed really hard to notice if the ICO is a scam or not. However, there are ways to at least minimize the risk of getting involved into scam ICO's like doing some background check of that particular ICO. Part of the checking is to check the ratings, the team member, the whitepaper and lastly the bounty manager handling the task should not be in red trust rating.