Posted On: September 29, 2026

RedCode SST Cards Invalidated: What NYC Workers and Employers Need to Know

The New York City Department of Buildings (DOB) has invalidated all SST certificates issued by RedCode Inc. If you received any of your SST training from RedCode, you will likely need to retake the affected training by Monday, December 7, 2026.

This applies even if another provider issued your SST card. Affected SST cards can remain active during a 90-day grace period, but workers must complete the required replacement training before the deadline to maintain valid credentials.

Here's what happened, how to determine whether your SST card is affected, and what NYC workers and employers should do next.

Why Did DOB Invalidate RedCode SST Cards?

On September 8, 2026, the Brooklyn District Attorney's Office announced the indictment of RedCode Inc., owner Lutfur Rahman, and associate Mohammed Tushar.

Prosecutors allege that the defendants sold OSHA and Site Safety Training cards for $500 without requiring purchasers to complete the required training. They were charged with offering a false instrument for filing, receiving reward for official misconduct, and falsifying business records. Their next scheduled court date is November 4, 2026.

An indictment is an accusation, not proof of guilt.

Following the indictment, DOB invalidated all SST certificates issued by RedCode and removed the company as an approved training provider. Approximately 2,000 workers had active SST cards issued by RedCode at the time of DOB's announcement.

Is Your SST Card Affected?

Your NYC SST card may be affected even if RedCode isn't the provider named on the card. According to DOB's RedCode guidance, you may need to take action if:

RedCode issued your SST card. You must complete the required replacement training and obtain a new SST card from a DOB Registered Course Provider.
Another provider issued your SST card using RedCode certificates. You must retake the training associated with those certificates by December 7.
You used RedCode certificates for a Worker Wallet certification or DOB license requirement. You must complete the required replacement training by the deadline.
Your OSHA card lists SM Lutfur Rahman as the instructor. You must complete the required OSHA training through a current OSHA Training Provider.

Training completed through other providers isn't automatically invalidated. The required retraining applies to the training associated with the affected RedCode certificates.

When Is the RedCode SST Card Deadline?

Affected workers have through Monday, December 7, 2026, to complete the required replacement training.

During this grace period, affected SST cards remain active when scanned at a jobsite.

Beginning December 8, 2026:

RedCode-issued SST cards will be revoked.
RedCode certificates will no longer satisfy applicable SST, worker certification, or licensing requirements.
SST cards issued by other providers may be revoked if affected RedCode training hasn't been replaced.
OSHA cards listing SM Lutfur Rahman as the instructor will no longer be accepted toward SST requirements.

Workers should plan their retraining early rather than waiting until the final weekend.

What Should Affected Workers Do?

If RedCode is connected to your SST training history, follow these steps:

Find out which training is affected. Contact a DOB Registered Course Provider to identify which certificates associated with your SST card came from RedCode.
Retake the affected training. Complete the required courses through a DOB Registered Course Provider, such as 360training.com.
Replace your SST card if needed. If RedCode issued your card directly, you must obtain a replacement SST card from a DOB Registered Course Provider.
Complete everything by December 7. Don't wait until your card stops scanning to take action.

You do not necessarily have to repeat your entire SST training pathway. The goal is to replace the required training associated with the invalidated RedCode certificates.

What Should NYC Employers and Contractors Do?

General contractors, subcontractors, and employers should review their workforce before the grace period ends.

Don't only look for SST cards issued by RedCode. Cards issued by other providers can also be affected when RedCode certificates were used to meet SST training requirements.

Employers and contractors should:

Audit SST records for workers on covered sites.
Identify RedCode certificates, including those supporting SST cards issued by other providers.
Check applicable OSHA cards for SM Lutfur Rahman as the instructor.
Notify affected workers and subcontractors in writing about the retraining requirement and December 7 deadline.
Schedule replacement training now to avoid a last-minute rush.
Set a December 8 jobsite access policy to confirm affected workers have valid SST credentials before entering an SST-covered site.

DOB states that an untrained worker on a site subject to SST requirements can result in civil penalties of up to $5,000 per untrained worker for the site owner, permit holder, and employer of the untrained worker.

Retake Your Required SST Training With 360training

To help affected workers complete their required replacement training, 360training is offering 20% off eligible NYC SST training through December 7, 2026. Use promo code SST20OFF at checkout to receive the discount on eligible training.

360training offers a range of NYC SST courses and packages that may be used to complete eligible replacement training. Review your affected training first, then select the course or package that matches your requirements.

NYC SST Worker and Supervisor Packages

NYC SST Individual Courses

OSHA Outreach Training

Workers may also qualify for free SST training through the NYC Department of Small Business Services (SBS). Call 888-SBS-4NYC (888-727-4692) or visit nyc.gov/SST for information about the city's free Construction Site Safety Training Program.

Don't wait until the December 7 deadline. Enroll early to give yourself time to complete the required replacement training and obtain a new SST card, if needed.

RedCode SST Card FAQs

Do I Need to Retake My SST Training if I Have a RedCode Certificate?

Yes. You must retake the training associated with the affected RedCode certificates by December 7, 2026. You do not necessarily need to repeat valid training completed through other providers.

Do I Need a Replacement SST Card?

If RedCode issued your SST card directly, you must complete the required replacement training and obtain a new SST card from a DOB Registered Course Provider by December 7.

If another provider issued your SST card using RedCode certificates, DOB says the card can remain active after December 7 if you complete the required replacement training during the grace period.

Can I Retake the Affected Training Through 360training?

Yes. 360training.com, Inc., which offers NYC SST training, is a DOB Registered Course Provider. First determine which RedCode-linked training you need to replace, then select the applicable SST training.

What if I'm Not Sure Whether My SST Card Is Affected?

Contact a DOB Registered Course Provider for help reviewing the training associated with your SST card. For questions about your individual status or DOB requirements, contact DOB directly.

Last updated: September 22, 2026. This article reflects NYC DOB guidance available as of this date. Check DOB's current guidance for any changes to the requirements or deadline.