Most people who commit financial crimes try to keep it quiet. This one set it to a beat and pushed it to millions of views — "Internet Swiping," "Million Dollar Criminal," a track literally titled "Wire Fraud Tutorial," and a diamond-encrusted card skimmer worn around the neck as jewelry. For years even his critics figured it was just savvy marketing; there wasn't much proof he did any of it. Then his own accounts started promoting a web shop selling stolen cards, identity "fullz," and counterfeit-check software. And then — the part no screenwriter would dare pitch — after his bank froze a $75,000 wire citing a law-enforcement investigation, he sued the bank. In the pro se complaint, he insisted "nothing illegal occurred," and left as his contact the same phone number that had registered the fraud shop. Peak drama-clown: self-incrimination as a marketing plan.
Listen up, I’m finna show y’all how to hit a bank. Just pay attention, this is a quick way to jug in any state. First you wanna get a bank log from a trusted site. Do your research because the information must be right.
@punchmadedev — opening bars of his own song “Wire Fraud Tutorial,” transcribed by KrebsOnSecurity. He later told reporters the song teaches fans how to avoid fraud.
WHO
"Punchmade Dev" — identified by KrebsOnSecurity as Devon Turner, early 20s, Lexington, Kentucky; earlier online handles "OBN Dev" and "DevTakeFlight" FACT
SCENE
Rapper and social-media personality with an eight-figure view count and a ~860k Instagram / 75k+ Telegram following; principal of OBN Group LLC (assumed name Punchmade LLC) and Punchmade Records
THE DRAMA
Built a brand glamorizing cybercrime — hit songs, a functional diamond-crusted card skimmer as jewelry, paid "tutorials" — then, per Krebs, promoted a shop selling stolen cards and counterfeit-check software. Capped it by suing his own bank after it froze a $75k wire citing a law-enforcement probe
RECORD
No criminal charge or conviction as of the cited reporting. The paper trail is his own: published songs and posts, Kentucky corporate filings, and a pro se lawsuit in which he leaves the fraud shop's registration phone number as his contact FACT
STATUS
STILL POSTING — UNCHARGED — shops rotate domains, the persona rolls on, and a bank's frozen wire is, so far, the only receipt with a courtroom behind it
troll.fan usually files the people who tried to hide what they did. Punchmade Dev is the opposite specimen: a personality whose entire product is the boast. Everything below is either his own published output or Brian Krebs's reporting on it — and the single most damning document in the file is one Turner wrote and filed himself. Whether that makes him a real enabler of fraud or a broke kid who spent the lawyer money on necklaces is, as Krebs put it, genuinely hard to tell. We keep both readings on the page.
the drama timeline
ACT I — THE PERSONA (2017–2023)
A Lexington kid turns a gaming stream into a rap brand, and the brand's whole aesthetic is stolen money.
2017–21
From "OBN Dev" to a record label
By Krebs's account — drawing on a fan documentary and Kentucky corporate records — Turner first built a following streaming the video game NBA 2K17 under the handles "OBN Dev" and "DevTakeFlight." In 2021 he launches Punchmade Records, producing his own beats and editing his own videos. Kentucky Secretary of State filings show OBN Group LLC in Lexington, with a Certificate of Assumed Name establishing Punchmade LLC; a second, now-defunct entity, DevTakeFlightBeats Inc., is tied to the same person.
The persona hardens into a genre. Songs like "Internet Swiping" and "Million Dollar Criminal" rack up millions of views, all built around glamorizing online financial crime. In his own videos and posts he flashes bags of cash and roughly a half-million dollars in custom jewelry — among the medallions, per Krebs, a functional diamond-encrusted payment-card skimming device worn as a necklace, alongside a diamond Bitcoin, a University of Kentucky piece, and a diamond Lexington skyline. The aesthetic is the message: crime pays, and it sparkles.
"Internet Swiping," Punchmade Dev's own official music video — the persona in its native form. (YouTube, oEmbed-verified.)
One song crosses a line even YouTube won't host — and law enforcement, he says, asked for it gone.
SUMMER 2023
"Wire Fraud Tutorial," removed
His most on-the-nose track, "Wire Fraud Tutorial," is pulled by YouTube for violating its rules. Punchmade says on social media that the removal followed a legal-process request to YouTube from law enforcement. Asked about it, the rapper tells reporters he wasn't teaching anyone to commit wire fraud — he was informing fans how to avoid becoming victims of it. Krebs's dry note: that is a hard read to square with a song that opens, "Listen up, I'm finna show y'all how to hit a bank."
The marketing-versus-real-thing question gets an answer his own accounts start advertising.
JAN 17, 2024
The card shop debuts
Krebs reports that Punchmade's video and social accounts have begun promoting a web shop — punchmade[.]atshop[.]io, pushed through an official Instagram and a Telegram channel — selling stolen payment cards and identity data, hacked financial accounts, and software for producing counterfeit checks. Listings Krebs documents include Cash App logins and "Fullz + Linkable CC" identity bundles, priced around $80 in cryptocurrency. Krebs ties the shop to Turner through breach records (Constella Intelligence) and domain registrations (DomainTools) linked to his email and Lexington phone number. For years the persona could be dismissed as an act; the shop is what changed that.
Told his bank flagged him for law enforcement, he responds not by going quiet but by filing suit — and hands investigators the receipt himself.
JUN 26, 2024
Punchmade v. PNC Bank
After PNC Bank blocks a $75,000 wire transfer, freezes and then closes his account for "suspicious activity," Turner files a pro se lawsuit against the bank, alleging "unlawful discriminatory and tortuous action." He writes: "The Plaintiff is a very successful African-American business owner, who has generated millions of dollars with his businesses, has hired 30 plus people." He alleges bank staff implied it was unusual for someone like him to have that kind of money. Then the self-inflicted part: the complaint itself records that PNC told him law enforcement would be contacted — and Turner, "not worried at all about law enforcement being involved because nothing illegal occurred," sues anyway.
At the bottom of his complaint, Turner leaves a contact phone number: 859-963-6243. Per Krebs, DomainTools shows that same Lexington number was used to register punchmade[.]cc — the successor fraud shop that "behaves and looks the same" as the old one — and the earlier foreverpunchmade[.]com. Krebs's kicker writes itself: a man who sells tutorials on "opsec" — keeping a criminal identity separate from a real one — "can't even register a domain name anonymously," and then staples the link to a federal court filing. (A reader later flagged that Turner also sued a Mercedes dealership over an alleged lemon, using a punchmadedev email.)
The documented record: the songs, the view counts, the diamond skimmer worn as jewelry, and the paid "tutorials" are Punchmade Dev's own published output. Kentucky corporate filings tie OBN Group LLC / Punchmade LLC to Devon Turner. Brian Krebs, working from Constella breach data and DomainTools registrations, traces the Punchmade-branded shops — selling stolen cards, identity "fullz," and counterfeit-check software — to the same person.
The best evidence is his own: Turner filed a federal lawsuit acknowledging his bank told him law enforcement would be contacted, asserted "nothing illegal occurred," and left as his contact the very phone number that registered the fraud shop. No investigator manufactured that; he wrote it and filed it.
He has not been charged or convicted: as of the cited reporting there is no indictment, no plea, no conviction for any cybercrime. Krebs himself noted that for years there was little evidence Punchmade personally committed the crimes he raps about, and that even critics thought the persona "could just be savvy marketing" [1].
He says the song is a warning, not a how-to: Turner told reporters "Wire Fraud Tutorial" was meant to teach fans how to avoid being victims of wire fraud, not to instruct them how to commit it [1].
He denied the lawsuit was tied to the shop: reached on X, the Punchmade Dev account said it was "not affiliated" with the lawsuit filed by Turner, and Turner declined to comment for the reporting — the shop attribution rests on Krebs's investigation, not an admission or a court finding [2].
YOU DECIDE
Krebs framed the open question better than we can: is Punchmade Dev a big-time enabler of fraud, as the persona insists — or a two-bit nitwit who spent so much on medallions he couldn't afford a lawyer and filed pro se? The record does not resolve it, because he has never been charged. What the record does show is a man who built a fortune's worth of attention on advertising crime, and who, when a bank treated the advertising as a lead, went to court to complain about it — and left the fraud shop's phone number on the complaint.
The archive does not convict. The archive keeps the lyric, the corporate filing, and the phone number he wrote at the bottom of the page.
evidence locker
PRIMARY / INVESTIGATIVE REPORTING
KrebsOnSecurity — "E-Crime Rapper 'Punchmade Dev' Debuts Card Shop" (Jan 17, 2024)FACT / ATTRIBUTED — the songs, the diamond skimmer, the "Wire Fraud Tutorial" takedown and his rebuttal, the shop selling stolen cards / fullz / check software, and the Constella + DomainTools + KY Secretary of State linkage of "Punchmade Dev" to Devon Turner.
krebsonsecurity.com/2024/01/e-crime-rapper-punchmade-dev-debuts-card-shop/
KrebsOnSecurity — "Cybercrime Rapper Sues Bank Over Fraud Investigation" (Aug 7, 2024)FACT / ATTRIBUTED — the PNC lawsuit, the $75k frozen wire and law-enforcement note, the "very successful African-American business owner" quote, the phone number matching the punchmade[.]cc registration, and the X-account "not affiliated" denial.
krebsonsecurity.com/2024/08/cybercrime-rapper-sues-bank-over-fraud-investigation/
COURT FILING
Turner v. PNC Bank — pro se complaint (filed Jun 26, 2024)FACT — the primary document: Turner's own filing, in his own words, including the law-enforcement acknowledgment and the contact phone number. Hosted as a PDF by KrebsOnSecurity.
krebsonsecurity.com/wp-content/uploads/2024/08/punchmadevpnc.pdf
FIRST-PARTY & CROSS-LINKS
YouTube (@punchmadedev) — "Internet Swiping" (official music video)FIRST-PARTY — his own channel upload; oEmbed-verified (author "Punchmade Dev," HTTP 200). The persona in its native form; embedded above.
youtube.com/watch?v=E7lt09xBM9g
troll.fan — The TimelineCROSS-LINK — where the 2024 Punchmade beats sit in the scene's larger chronology.
troll.fan/timeline.html
The standard. Punchmade Dev's songs, jewelry, and paid "tutorials" are his own published work; the corporate filings are Kentucky public record; the lawsuit is a document Devon Turner wrote and filed himself. The attribution of the Punchmade-branded fraud shops to Turner is Brian Krebs's investigative reporting, built on breach and domain-registration data — stated as Krebs's finding, not as an adjudicated fact. Turner has not been charged or convicted of any cybercrime as of this reporting, and that is stated plainly; his rebuttal, his X-account denial, and the absence of a conviction are carried at full strength. No motive and no private character are asserted, and no fraud method is reproduced. If a line here couldn't survive scrutiny, it wouldn't be on the page.