Doesn't the lower bidder still have to provide proof of a chain of custody for sensitive equipment?
Just one procurement officer with the slightest doubt, and calling up someone at Cisco HQ to double check a serial number, would have discovered this scam almost instantly.