Apple couldn’t tell fake iPhones from real ones, lost $2.5M to scammers