The other five who were arrested were among those who had paid for fake vaccination certificates, said the police.

Johor police chief Kamarul Zaman Mamat asked the remaining 30 buyers of fake vaccination certificates to surrender before a search and arrest operation is conducted.

“Eight mobile phones were confiscated. They contained images of digital certificates and communications between clinic staff and buyers.

“Computer equipment believed to be used to register the details of vaccine recipients into the MySejahtera system was also confiscated,” he said in a press conference today.

Kamarul said the clinic’s modus operandi was to find buyers through agents or representatives, who were paid between RM125 to RM300 for every person they introduced.

He did not rule out the possibility there were other syndicates operating in the same manner.

“Based on the data we have, there are at least 30 buyers involved. They are currently being investigated, and so we ask them all to surrender.”

He said the case was being probed under Sections 420/511 of the Penal Code. If convicted, those involved can be sentenced to a maximum of 10 years in jail, whipping, and a fine.

“We are also investigating this case under Section 22 (d) of the Prevention and Control of Infectious Diseases Act 1988, which carries a maximum of two years in jail, or a fine, or both,” he said.