VCV users can verify these certificate by scanning a QR code displayed on:-
(1) the MySejahtera application, or its equivalent as used in another country,
(2) an electronic version of the certifcate ie on PDF form, or
(3) a printed paper version of the certifcate.

VCV verifies two categories of certificate QR codes containing:-
(1) URL of a trusted server that points to identity and vaccination information. This verification requires internet connectivity.
(2) Identity and vaccination information with a digital signature issued by a trusted entity. For this verification, internet connectivity is not required because the list of trusted public keys is stored in VCV.

VCV will be updated periodically to maintain the list of trusted servers and trusted public keys.

VCV will display the result of vaccination certificate verification. Identity and vaccination information is displayed only if the vaccination certificate is valid. VCV is designed to not retain certificate information, as a privacy protective measure.

The present version of this application is able to verify certificates from the following countries:-
- Malaysia
- All countries that have been accepted into the European Union (EU) Digital COVID Certificate (DCC) consortium. This consortium includes 27 EU countries, and 40 non-EU countries and jurisdictions, at this publication of this version of the VCV.
- Brunei
- India
- Indonesia
- Philippines
- Syria
- Australia