Two men from Luton have been sentenced after an investigation into the creation and sale of fraudulent Covid-19 vaccination records. Waqas Hanif, 28, and Touqir Nasir, 31, were charged as part of a joint National Crime Agency (NCA) and NHS England investigation. Hanif was arrested by NCA officers in January 2022, while Nasir attended a voluntary interview in March 2023. The investigation alleged that more than 2,000 fraudulent vaccination records were created between June and October 2021 at Kingsway Health Centre in Luton, where Hanif worked as a vaccination programme care co-ordinator. Investigators said the records were linked to 2,663 suspicious entries tied to the Kingsway Health Centre, including 1,875 connected to five IP addresses associated with Hanif’s home address. They also alleged Hanif had site administrator rights to Pinnacle, the NHS system used to generate and record vaccinations. The NCA said unvaccinated individuals paid for “official vaccine passport” records obtained illegally from social media platforms, including Telegram. Hanif allegedly charged clients between £80 and £150 for two “doses”. The investigation also reported that Hanif had a safe deposit box rented, from which officers seized £136,405 in cash. Hanif pleaded guilty at Luton Crown Court on 4 March 2025 to offences including charges under the Computer Misuse Act, Fraud Act and the Proceeds of Crime Act (POCA). Nasir pleaded guilty at the same court on 4 December 2025 to a Fraud Act offence, and later pleaded guilty to an additional POCA offence on 26 February, with a Newton Hearing held on 3 June. On 3 September 2026, Hanif was sentenced to three years in prison. Nasir was sentenced to ten months suspended for one year, and was ordered to a curfew for six months. A National Crime Agency official said the defendants abused the healthcare system for financial gain during the pandemic.