Fake Sputnik V Vaccination Certificates Sold on the Darknet for $600

Previously, we reported that the darknet had listings for three patented COVID-19 vaccines—Pfizer/BioNTech, AstraZeneca, and Moderna—as well as some unpatented ones. Now, analysts at Check Point have noticed a new trend: the sale of fake COVID-19 vaccination certificates and negative coronavirus test results on the darknet.

Researchers also note a 300% increase in vaccine sale listings over the past three months. Criminals are offering Johnson & Johnson, AstraZeneca, Sputnik V, and SinoPharm vaccines starting at $500 per dose. There are now about 1,200 such listings—three times more than in January of this year.

A fake vaccination certificate, supposedly issued by the U.S. Centers for Disease Control and Prevention (CDC), costs $200 each. Payment is accepted only in Bitcoin to prevent tracking the seller.

How the Sale Works

Check Point Research investigators contacted a seller to learn more about the process, including details about delivery, pricing, and the authenticity of the certificates. The seller claimed to have already sold many certificates without any issues. All that was required was to provide the necessary names and dates for the certificates and pay $200. Below is a screenshot of their conversation.

Fake Negative COVID-19 Test Results

There is also an option to buy a fake negative COVID-19 test result with a “three for the price of two” deal, or to make one yourself in just half an hour for $25. Users simply enter their information into a convenient form and pay the fee. The completed certificate is sent to the specified email address within 30 minutes. Below is a template for creating such a certificate.

Growing Darknet Activity Around Vaccines and Certificates

“Recently, there has been a surge in vaccine-related offers on the darknet. Three months ago, when we first started researching this issue, we found only a few hundred listings for Moderna and Pfizer vaccines. Today, all existing types of vaccines are available on the darknet. Another new trend is the sale of fake certificates for international travel: hackers now offer not only vaccines but all documents related to COVID-19 and vaccination,” says Oded Vanunu, Head of Product Vulnerability Research at Check Point Software Technologies.

“Criminals are trying to profit not only from the demand for vaccines but also from people’s desire to avoid vaccination. It’s important to understand all the risks associated with buying vaccines from unofficial sources and ordering fake documents. Hackers are clearly interested in collecting as much personal information as possible. Moreover, unvaccinated people seeking fake negative test results may actually be infected. By buying fake certificates, they hinder efforts to fight the disease. I also strongly advise users not to post photos of real vaccination certificates or negative test results on social media, as they could fall into the wrong hands. I am certain that we will see even more darknet activity related to COVID-19 and vaccination in the near future.”

Vaccine Prices on the Darknet

The darknet continues to offer a wide variety of COVID-19 vaccines, with prices starting at $500 per dose. The most commonly offered vaccines are:

• Oxford AstraZeneca for $500 (just under 38,000 rubles)
• Johnson & Johnson for $600 (just over 45,000 rubles)
• Sputnik V for $600 (just over 45,000 rubles)
• Chinese SINOPHARM for $500 (just under 38,000 rubles)