Check the URL for the airdrop, that’s usually the first giveaway of validity.

Then visit the site for the token/project and find the link to their Twitter profile. Check if they promote or denounce the ongoing airdrop. If you can find no mention... just tweet them.

Alternatively do it via their Telegram channel.