It would be cool if it was all fair - that there really is no private key and you can raise the token to heaven. But how do you know if it's not a scam at all?