|
The New York City Department of Buildings (DOB), Brooklyn District Attorney’s Office and NYC Department of Investigation recently announced enforcement action involving RedCode Inc., a DOB-authorized construction safety training provider operating in Brooklyn and Queens.
RedCode Inc., its owner and associate, has been indicted in connection with an alleged scheme involving the issuance of OSHA and NYC Site Safety Training (SST) credentials without students completing the required training.
According to the Brooklyn District Attorney’s Office, undercover investigators were allegedly able to obtain OSHA and SST cards for approximately $500 without completing the required safety courses. The charges are allegations and have not yet been proven in court.
Approximately 2,000 SST Cards Affected
Following the investigation, NYC DOB removed RedCode Inc. as an authorized training provider and invalidated training certificates issued by the company. DOB has established a 90-day grace period ending December 7, 2026, allowing affected workers time to complete legitimate replacement training and obtain compliant credentials.
Employers should be aware that an affected SST card may continue to scan as active during the grace period. Therefore, employers should not rely solely on the current active/inactive status of a card when they know or suspect that RedCode training was involved.
DOB has also advised that OSHA cards issued by SM Lutfur Rahman, owner of RedCode Inc., will no longer be accepted toward NYC SST requirements. Workers relying on these OSHA credentials may need to complete new OSHA training through an authorized provider.
RECOMMENDED EMPLOYER ACTION
Construction employers, general contractors and subcontractors working on NYC projects should immediately review their workforce and subcontractor safety credentials.
1. Verify SST Cards Using the NYC DOB Training Connect App
Employers should use the NYC DOB Training Connect SST Validator App. to scan and verify SST cards presented by workers.
Workers with invalid cards need to take the training at a NYCDOB Approved Provider in good standing. The link to the provider list is below for your convenience:
SST TRAINING PROVIDERS
The Training Connect system allows contractors and site management personnel to confirm whether an SST card is recognized within DOB's system and helps identify questionable or invalid credentials.
2.Recommended practice: Supervisors, site safety personnel and competent persons responsible for worker onboarding should have access to the Training Connect verification application and verify SST credentials before allowing workers onto SST-required projects.
Credential verification should also be incorporated into periodic site audits rather than being performed only when a worker is initially hired.
3. Identify Any RedCode Associated Training
Review employee and subcontractor records for SST cards issued by RedCode Inc., training certificates issued by RedCode Inc., SST cards obtained from another provider using RedCode course certificates, and OSHA cards issued by or associated with SM Lutfur Rahman. Workers whose credentials are affected should be directed to an authorized training provider as soon as possible.
4. Require Replacement Training Before the Deadline
Affected workers should complete the necessary replacement training and obtain compliant credentials before December 7, 2026.
Employers should not wait until the end of the grace period. Delays may result in workers becoming unable to work on SST-required projects once their credentials are invalidated.
5. Require Subcontractor Verification
General contractors should notify subcontractors and staffing companies of the issue and require them to verify their workers’ credentials. Subcontractors should confirm that worker SST cards have been verified, any RedCode associated credentials have been identified, required replacement training is being completed, and only workers with valid credentials will be assigned to the project.
6. Maintain Verification Records
Employers should document credential verification as part of their safety and compliance program. Records should include the employee’s name, SST card number, date of verification, name of the person performing the verification, training provider, expiration date, and any corrective action or retraining required.
A screenshot or electronic verification record from the Training Connect system may also be retained where appropriate.
WHY THIS MATTERS
Fraud involving construction safety training credentials has become a recurring enforcement concern in New York City. The RedCode investigation follows other significant DOB enforcement actions involving safety training providers in recent years. These cases demonstrate why contractors should not rely exclusively on photocopies or visual inspection of OSHA and SST cards.
Electronic verification of SST cards through NYC DOB Training Connect should be part of every contractor's worker credentialing and site-access process.
Employers should also remind workers that purchasing or obtaining credentials without completing required training places both the worker and employer at risk and undermines the purpose of NYC's construction safety requirements.
IMMEDIATE RECOMMENDATION
Review and verify all SST cards using NYC DOB Training Connect.
Any credential associated with RedCode Inc. should receive additional review, and affected workers should begin replacement training immediately to avoid disruption after the December 7, 2026, deadline.
This safety alert is intended to provide general safety and compliance information to employers and should not be considered legal advice.
| 
