If your RedCode SST cards or certificates are still active, there’s something you need to act on before December 7, 2026. Here’s what happened, what it means for you, and what to do next.
What happened
On September 8, 2026, the Brooklyn District Attorney’s Office indicted RedCode Inc., along with its owner, SM Lutfur Rahman, and an associate, Mohammed Tushar, on fraud-related charges. Prosecutors allege the company sold OSHA and Site Safety Training cards to workers for $500 without actually providing the required training. RedCode is presumed innocent unless proven otherwise — this is an indictment, not a conviction.
As a result, DOB is invalidating every RedCode SST card and certificate the company issued.
What This Means for Your RedCode SST Cards
- You can keep working for now. During a 90-day grace period running through December 7, 2026, RedCode-issued SST cards and certificates will still scan as valid on a jobsite.
- After December 7, 2026:
- DOB will revoke SST cards issued directly by RedCode.
- RedCode certificates will no longer satisfy SST, worker certification, or licensing requirements.
- OSHA cards listing SM Lutfur Rahman as instructor will no longer count toward SST requirements.
- DOB will also revoke SST cards issued by other course providers that relied on RedCode certificates, unless the worker retakes the required training by the deadline.
- Training you didn’t get from RedCode is unaffected. You only need to replace the specific certificates tied to RedCode — you don’t need to redo anything else on your card.
What to do next
- First, find out what’s affected. A registered course provider can tell you which certificates on your SST card came from RedCode.
- Next, retake the required training through any DOB Registered Course Provider — it doesn’t have to be the one that originally issued your card.
- Then, get your training done by December 7, 2026. That’s the last day RedCode SST cards and certificates are valid.
- Finally, if RedCode issued your SST card directly, you’ll need a new card from a registered provider once your training is complete.
How NextWave can help
At NextWave, we require every student to complete the full course hours — no shortcuts. That means real instruction from knowledgeable, DOB-approved instructors, and a certificate that actually holds up down the road.
NextWave is a DOB Registered Course Provider (Provider #CP006), offering the SST Worker and Supervisor courses you need to replace your RedCode SST cards and get back in compliance.
- Visit our Contact page
- Email sst@nextwavesafety.com
- Call 212.933.9071
Read the official sources
- DOB SST Information page — DOB’s official, ongoing notice on this situation
- DOB press release, September 8, 2026
- DOB FAQ: RedCode Inc. Indictment (PDF)
- Brooklyn District Attorney’s press release
This post reflects DOB guidance as of September 17, 2026. We’ll update it if the Department revises the timeline or requirements.