Employees at a New York company thought they were arranging a $2.95 million face mask delivery—of what they claimed to be one million authentic masks—to Indiana’s Economic Development Corporation at the height of the pandemic.