The United States utterly failed to see the consequences of not having valid, imprinted, barcoded and other security features on COVID-19 cards to be able to validate who is vaccinated and who is not. In Europe and other locals they took this much more seriously and issued cards that were coded more like an identification card and with much more verifiable information.
Yet, it is still illegal to sell fake COVID-19 cards in the US and the mass selling of them on social media, the dark web, etc is extremely widespread and there have been many instances of people committing these actions have been prosecuted.