PHOENIX, AZ. (THECOUNT) — New activity has been observed in the Bitcoin account linked to the alleged ransom note in the disappearance of Nancy Guthrie. According to TMZ sources, the cryptocurrency account, referenced in the note sent to multiple media outlets, has shown recent “inbound” movement, raising questions about whether the family is complying with the suspected kidnapper.
The Bitcoin account first came to authorities’ attention after alleged kidnappers demanded payment in the cryptocurrency. TMZ was first to report on the activity, which law enforcement is now tracking in real time. Officials have not disclosed the amount of the transactions or whether the funds were transferred in or out of the account, citing the ongoing nature of the investigation.
|
Advertisement |
🚨BOMBSHELL! TMZ just revealed that there is activity being seen going in to the Bitcoin account tied to Nancy Guthrie's alleged ransom note!
This is a HUGE break in the case!
Praying for Nancy's SAFE RETURN. pic.twitter.com/FTZmYzSyb4
— Gunther Eagleman™ (@GuntherEagleman) February 11, 2026
Nancy, the mother of NBC “Today” anchor Savannah Guthrie, vanished from her Tucson, Arizona, home on the night of January 31 after being dropped off by her family around 9:48 p.m. She was reported missing by her family the following afternoon when she failed to attend church.
Authorities have described the case as a suspected abduction. Surveillance footage released earlier this month shows a masked individual approaching Nancy’s front door while wearing gloves and a ski mask, apparently tampering with the door camera. The Pima County Sheriff’s Office confirmed the footage was recovered from residual data in backend systems and noted that it may provide key evidence in identifying the individual.
Former FBI hostage negotiator Chip Massey told PEOPLE that any activity in the cryptocurrency account could be pivotal in the investigation. “We now have the image of the captor, of the person breaking into this house,” Massey said. “So there is so much here. We’re gonna know his height, his weight. And I guarantee you, more importantly, there is somebody out there that knows exactly who this is.”
The alleged kidnappers previously issued ransom deadlines, first on Thursday, February 5, and later on Monday, February 9. However, authorities stated that no verified contact had been made between Nancy’s family and the suspects. TMZ’s discovery of Bitcoin activity may indicate continued engagement by those responsible, though law enforcement has not confirmed any direct communication tied to the new account movement.
Former FBI assistant director Kieran Ramsey said the release of images and videos, combined with surveillance of the cryptocurrency account, is designed to increase pressure on the suspects. “This public exposure is going to raise the stress on anyone involved in this, especially if there is anybody that’s maybe just a helper or a facilitator who didn’t really sign up for how high profile this went,” Ramsey said.
Savannah Guthrie reposted the surveillance images on Instagram earlier this month, emphasizing her belief that her mother is alive and urging the public to assist law enforcement. “We believe she is alive. Bring her home,” she wrote.
The FBI and Pima County Sheriff’s Office continue to seek tips from the public regarding any information about the disappearance or the cryptocurrency account. Anyone with information is asked to call 1-800-CALL-FBI or 520-351-4900.
Experts note that Bitcoin transactions are traceable on the blockchain, allowing investigators to potentially identify exchanges or wallets used by the suspected kidnappers. This could provide a crucial lead in a case that has remained high-profile and complex since the initial disappearance.
DEVELOPING::