A Bitcoin wallet address associated with the alleged $6 million ransom demand for Nancy Guthrie, the 84-year-old mother of Today show co-anchor Savannah Guthrie, recorded its first transaction late Tuesday.
The movement of approximately $152 (0.0022 BTC) occurred nearly 24 hours after a final Monday deadline expired, marking the first sign of activity on a wallet that investigators have closely monitored since the January 31 abduction in Tucson, Arizona. While the origin of the $152 remains unclear, the FBI has intensified its search by releasing the first surveillance images of a masked suspect seen outside Guthrie’s home on the night she vanished.
Breaking: Harvey Levin tells OutFront he just saw “activity” in the bitcoin account from the first Guthrie ransom note sent to TMZ. pic.twitter.com/eVvfzNku8v
— Erin Burnett OutFront (@OutFrontCNN) February 11, 2026
On-chain activity sparks fresh leads for investigators
The $152 deposit into the publicly viewable Bitcoin ledger follows a week of silence from the purported kidnappers, who had previously demanded payments of $4 million and then $6 million in BTC via notes sent to media outlets like TMZ. Forensic analysts suggest that even small transfers can provide breadcrumbs for law enforcement to track, as any attempt to move these funds to a centralized exchange would require Know Your Customer (KYC) verification.
High-profile abductions mirror rising violent crypto crime
The Guthrie case highlights a disturbing trend of crypto wrench attacks, where physical violence or kidnapping is used to extort digital assets. In 2025, reports of such violent coercion cases climbed significantly, reflecting how the high value of Bitcoin has spilt over into real-world brutality.
Crypto security firms are raising concerns about a significant increase in scams, with tens of millions of dollars stolen from users in January alone. This alarming pattern, which includes address poisoning and signature phishing attacks, shows no indication of slowing down. DeFi Planet had previously reported on related events.
As the search for Nancy Guthrie enters its second week, the Pima County Sheriff’s Department continues to urge the public to report any suspicious activity, especially given Guthrie’s reliance on a pacemaker and critical heart medication.
Enjoyed this piece? Bookmark DeFi Planet, explore related topics, and follow us on Twitter, LinkedIn, Facebook, Instagram, Threads and CoinMarketCap Community for seamless access to high-quality industry insights.
“Take control of your crypto portfolio with MARKETS PRO, DeFi Planet’s suite of analytics tools.”
