Episode

EP 164 — Oak Cliff Swipers

07 October 2025 Official episode · Official transcript

black hat cybercrime carding

The episode features Nathan Michael describing a long-running credit-card skimming, carding, counterfeit-card, and retail-fraud operation associated with the Oak Cliff Swipers, along with later hacking and cybercrime activity.

Topics: Payment-card skimming at gas pumps and ATMs, Magnetic-stripe data and Track 1/Track 2, Bluetooth-enabled skimmers, Manual entry of stolen card numbers and CVVs, Credit-card dumps and underground card markets, Counterfeit payment-card production, Fargo card printers and MSR devices, Retail gift-card fraud, Recruitment and coordination of shoppers/swipers, Operational security and surveillance avoidance, Access device fraud, Use of online services and gaming economies to move illicit value, Unauthorized access to corporate email and publication of confidential information

Official episode-page sources

Links published on the Darknet Diaries episode page. Not LLM output.

Entities (39)

Claims (31)

Qualified statements from this episode, not graph facts.

Nathan Michael USES Diablo II

Nathan says he sold Diablo II items and used Diablo II dupes as part of his online money-making activities.

Explicit Confidence 99% · Nathan Michael EP 164 Details

“I was selling Diablo II items.”

Nathan Michael · offsets 8360–8390

Nathan Michael USES World of Warcraft

Nathan says he sold World of Warcraft gold.

Explicit Confidence 99% · Nathan Michael EP 164 Details

“Then we sold WoW gold.”

Nathan Michael · offsets 12689–12711

Nathan Michael USES PayPal

Nathan says he used stolen PayPal accounts to buy in-game gold; he also describes being scammed through PayPal chargebacks.

Explicit Confidence 99% · Nathan Michael EP 164 Details

“we were buying it from them with stolen PayPals and shit.”

Nathan Michael · offsets 12892–12949

Nathan Michael USES root kit virus

Nathan says he and his brother had a rootkit virus that stole gaming-platform accounts.

Explicit Confidence 99% · Nathan Michael EP 164 Details

“we had a virus, a root kit virus that stole all the accounts for every gaming platform”

Nathan Michael · offsets 12717–12803

Nathan Michael USES World of Warcraft gold laundering

Jack characterizes Nathan's use of World of Warcraft gold as a money-laundering mechanism for converting stolen PayPal funds into cash.

Explicit Confidence 98% · Jack Rhysider EP 164 Details

“he was using World of Warcraft gold as sort of a money-laundering mechanism”

Jack Rhysider · offsets 13411–13486

Nathan Michael USES credit card dumps

Jack says Nathan entered chat rooms where credit-card dumps were sold or traded and obtained full card details.

Explicit Confidence 98% · Jack Rhysider EP 164 Details

“This led him to chat rooms where people were selling or trading credit card dumps.”

Jack Rhysider · offsets 13488–13570

Nathan Michael USES manual card-number entry fraud

Nathan describes deliberately demagnetizing cards so Walmart staff would manually enter stolen card numbers.

Explicit Confidence 99% · Nathan Michael EP 164 Details

“I’ve demagnetized the strip on the card so that it would say they gotta punch it in.”

Nathan Michael · offsets 15663–15747

Nathan Michael USES Walmart

Nathan says he and associates used Walmart registers to test stolen card numbers and obtain gift cards.

Explicit Confidence 98% · Nathan Michael EP 164 Details

“We’d just sit there and run that bitch and get whatever we get off of them.”

Nathan Michael · offsets 16069–16144

Nathan Michael USES MSR

Nathan says he used an MSR to write stolen card details onto blank payment cards.

Explicit Confidence 99% · Jack Rhysider EP 164 Details

“he used his MSR device to write the credit card details to the card.”

Jack Rhysider · offsets 30051–30119

Nathan Michael USES skimmer

Nathan says he purchased and deployed skimmers, including at gas pumps and ATMs.

Explicit Confidence 99% · Nathan Michael EP 164 Details

“I had gas pump ones and everything.”

Nathan Michael · offsets 20776–20811

“we had ones on ATM machines, too”

Nathan Michael · offsets 21140–21172

Nathan Michael USES Bluetooth

Nathan says later skimmers used Bluetooth to download collected card data.

Explicit Confidence 99% · Nathan Michael EP 164 Details

“The later ones had Bluetooth. You just go Bluetooth to it; boop, download.”

Nathan Michael · offsets 23352–23426

Nathan Michael USES gas-pump skimming

Nathan says he placed a skimmer on a gas pump and left it there to collect card data.

Explicit Confidence 99% · Nathan Michael EP 164 Details

“I would just put it in there and let it sit for about a week.”

Nathan Michael · offsets 22190–22251

Nathan Michael USES ATM skimming

Nathan says he used skimmers on ATM machines, although capturing PINs was a problem.

Explicit Confidence 98% · Nathan Michael EP 164 Details

“we had ones on ATM machines, too, back in the days”

Nathan Michael · offsets 21140–21190

Nathan Michael USES opsec

Nathan says he and his brother hesitated to use freshly skimmed cards while trying to maintain operational security.

Explicit Confidence 98% · Nathan Michael EP 164 Details

“I guess we were trying to do opsec on it.”

Nathan Michael · offsets 28768–28809

Nathan Michael USES Google Docs

Jack says Nathan stored stolen card data in a Google document.

Explicit Confidence 99% · Jack Rhysider EP 164 Details

“He was storing these cards in a Google doc”

Jack Rhysider · offsets 29952–29994

Nathan Michael USES Liberty Reserve

Nathan says he used Liberty Reserve as web money and lacked it when deciding to use freshly skimmed cards.

Explicit Confidence 98% · Nathan Michael EP 164 Details

“back then it was Liberty Reserve. We had no Liberty Reserve to buy any — our web money.”

Nathan Michael · offsets 29750–29837

Nathan Michael USES Fargo printer

Jack says Nathan used a Fargo printer to make counterfeit payment cards.

Explicit Confidence 99% · Jack Rhysider EP 164 Details

“Nathan had a Fargo printer, which is a classic printer used to make IDs.”

Jack Rhysider · offsets 32665–32737

Nathan Michael USES counterfeit payment card production

Nathan printed counterfeit cards, programmed their magnetic stripes, and added photographs to make them appear legitimate.

Explicit Confidence 99% · Nathan Michael EP 164 Details

“I’d print the cards and then program the mag strip”

Nathan Michael · offsets 32885–32935

Nathan Michael USES shopper network

Nathan recruited shoppers to use counterfeit cards in stores and return purchased merchandise.

Explicit Confidence 99% · Jack Rhysider EP 164 Details

“have them go out and shop with stolen credit cards and then bring back any of the stuff you buy with it”

Jack Rhysider · offsets 33802–33905

Nathan Michael USES carding

Nathan describes himself as providing cards for shoppers who purchased merchandise with stolen card data.

Explicit Confidence 98% · Nathan Michael EP 164 Details

“I’m providing the cards.”

Nathan Michael · offsets 33945–33969

Nathan Michael USES swiping

Nathan explains that he trained people to act as swipers and planned their shopping routes.

Explicit Confidence 99% · Nathan Michael EP 164 Details

“I’m teaching you to be a swiper.”

Nathan Michael · offsets 39544–39576

Nathan Michael USES MapQuest

Nathan says he used MapQuest to plan shoppers’ routes and stores.

Explicit Confidence 99% · Nathan Michael EP 164 Details

“back then, it was MapQuest, right? I’d plan their whole route out for them”

Nathan Michael · offsets 39751–39825

Nathan Michael MEMBER_OF Oak Cliff Swipers

Nathan says he, his cousin, and a shopper formed a swiping clique called Oak Cliff Swipers.

Explicit Confidence 99% · Nathan Michael EP 164 Details

“We had a little swiping clique called Oak Cliff Swipers.”

Nathan Michael · offsets 59631–59687

Oak Cliff Swipers ASSOCIATED_WITH Oak Cliff

The Oak Cliff Swipers group is explicitly named after Oak Cliff, which Nathan calls his hood.

Explicit Confidence 98% · Nathan Michael EP 164 Details

“we went and got our OCS for Oak Cliff Swipers”

Nathan Michael · offsets 59584–59629

Nathan Michael USES Signal

Nathan communicated with Jack through Signal during the episode's interview arrangements.

Explicit Confidence 98% · Jack Rhysider EP 164 Details

“we should probably switch to Signal, which is a more private messaging app”

Jack Rhysider · offsets 2169–2243

Jack Rhysider USES Signal

Jack says he moved communications with Nathan to Signal for more private messaging.

Explicit Confidence 99% · Jack Rhysider EP 164 Details

“we should probably switch to Signal”

Jack Rhysider · offsets 2169–2204

EarthLink internal-information disclosure COMPROMISES EarthLink

Nathan claims he hacked EarthLink and accessed internal company information, including executives’ emails.

Explicit Confidence 97% · Nathan Michael EP 164 Details

“I got into the company — the president of the company’s e-mails”

Nathan Michael · offsets 72267–72330

EarthLink internal-information disclosure INVOLVES cjb.net

Nathan says he published confidential EarthLink material on the cjb.net website.

Explicit Confidence 99% · Nathan Michael EP 164 Details

“I put it on the cjb.net website”

Nathan Michael · offsets 72738–72769

EarthLink internal-information disclosure ATTRIBUTED_TO Nathan Michael

Nathan personally claims responsibility for hacking EarthLink and releasing internal documents.

Explicit Confidence 98% · Nathan Michael EP 164 Details

“I hacked EarthLink, bro.”

Nathan Michael · offsets 71720–71744

Nathan Michael USES cjb.net

Nathan says he used cjb.net to publish snippets from internal emails and confidential information.

Explicit Confidence 99% · Nathan Michael EP 164 Details

“I put it on the cjb.net website, just a little HTML thing with some snippets from the e-mails”

Nathan Michael · offsets 72738–72831

Darknet Diaries DEVELOPED_BY Jack Rhysider

Jack identifies himself as the maker of Darknet Diaries in the outro.

Explicit Confidence 97% · Nathan Michael EP 164 Details

“This show is made by me, little byte, Jack Rhysider.”

Nathan Michael · offsets 93866–93918

Transcript references

Works mentioned in the transcript. Distinct from show-note sources.

Extraction provenance

Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T08:46:45.083003+00:00