← Blog · Nov 10, 2026

Are GitHub bounties legit? How to tell real from fake

Short answer: the platforms are real and some bounties do get paid, but a large share of "bounties" on GitHub are not real. In our 27 Oct 2026 audit, 83 of 97 issues we had counted as Algora bounties had no comment from the real Algora app. Legitimacy is something you check issue by issue.

Signs a bounty is legitimate

• The platform itself confirms it. For Algora, a comment from the algora-pbc app saying "💎 $X bounty". For BountyHub, a comment from bountyhub-bot. For TaskBounty, the taskbounty label. For Opire, the reward appears in its public API.
• The issue is open and unassigned, and no merged pull request already solves it.
• The repository is active and established, not created last week.

Red flags

• A dollar amount typed into the issue text with no platform confirmation. Anyone can write "/bounty $500".
• A look-alike bot using the same "💎 $X bounty" format. We found one in our audit.
• Issues labelled "AI only allowed - no humans" or flooded with bot pull requests.
• A brand-new throwaway repository, or a bounty proposed by the repository owner on their own project.
• An issue that is already assigned, closed, or referenced by a merged pull request.

A real bounty can still fail to pay you

Platforms generally pay the pull request the maintainer decides to merge, so being first does not guarantee payment. A real bounty with many competing pull requests or an inactive maintainer can cost you hours for nothing. Legitimacy is the first check; competition and project health are the second.

You can run these checks in seconds with the free bounty verifier, or read how to spot fake GitHub bounties for the manual method.

FAQ

Are GitHub bounties legit? The platforms (Algora, Opire, BountyHub, TaskBounty) are real, but many issues that look like bounties are not. In the BountyOS audit of 27 Oct 2026, 83 of 97 issues counted as Algora bounties had no confirmation from the real Algora app.

How do I know if a GitHub bounty is real? Look for confirmation from the platform itself: the algora-pbc comment for Algora, bountyhub-bot for BountyHub, the taskbounty label for TaskBounty, or the reward in Opire's public API. A dollar amount typed in the issue is not proof.

Do GitHub bounties actually pay? Real ones can, under each platform's rules, usually when the maintainer merges your pull request. Being first does not guarantee payment, and bounties with many competing pull requests often pay nobody.

Can I check an IssueHunt bounty? Not publicly. Confirm it on IssueHunt itself before spending time on it.