A Bitcoin wallet identified in a ransom demand connected to Nancy Guthrie’s disappearance could still yield evidence six months after the 84-year-old vanished from her Arizona home.
The address received approximately $152 in cryptocurrency shortly after the suspected kidnapping, but the money has remained untouched.
Blockchain investigators say that inactivity does not necessarily make the wallet useless because its transaction history is public, permanent and capable of being compared with other addresses as investigative databases expand.
The renewed analysis comes as authorities release two ransom notes in full and Savannah Guthrie again asks anyone with information about her mother to come forward.
The Bitcoin Wallet Could Still Connect Investigators to a Suspect
Bezalel Eithan Raviv, founder and CEO of crypto-recovery company Lionsgate Network, told Page Six that the dormant wallet could continue providing investigators with “valuable” evidence. A Bitcoin address does not directly display its owner’s identity. Its transactions are nevertheless recorded on a public blockchain that investigators can examine indefinitely.
If the money is eventually moved, analysts may be able to follow it through additional addresses and determine whether it reaches a cryptocurrency exchange or another service that collects identifying information from customers. The address could also become more useful if it is later connected to a wallet identified through an unrelated investigation, data breach, exchange record, darknet operation or law-enforcement seizure.
“An unused wallet can still be valuable,” Raviv said. He explained that investigators can search for relationships with known criminal wallets, scam networks and clusters of addresses believed to be controlled by the same person or organization.
Raviv cautioned that the cryptocurrency demand should be examined alongside the timing, language and delivery of the ransom communications. He also said it remained possible that the demand was intended to distract investigators rather than collect millions of dollars.
Only About $152 Was Deposited Into the Wallet
A transfer worth approximately $152 appeared in the wallet’s publicly viewable records on February 10. Arizona’s Family confirmed at the time that at least one transaction had been sent to the Bitcoin address included in the ransom note received by Tucson station KOLD and other news organizations.
Later reports said investigators transferred the small amount in an attempt to prompt whoever controlled the wallet to move the money. Any transfer to another wallet or exchange could have created additional evidence for analysts to follow. No withdrawal followed, and the cryptocurrency remained in the address.
The lack of movement prevented investigators from immediately tracing the money through an exchange. It also left behind a permanent blockchain record that can continue to be monitored and compared with newly identified addresses. Raviv said the wallet should not be judged only by its balance.
The First Ransom Note Demanded $4 Million in Bitcoin
Nancy Guthrie Investigation Update: Video & Ransom Note Details 1/3 pic.twitter.com/O0HDb8asMX
— Pima County Sheriff’s Department (@PimaSheriff) July 31, 2026
The Pima County Sheriff’s Department released the full text of two messages on July 31 as the investigation reached the six-month mark. The first note was sent to KOLD on February 2, one day after Nancy was reported missing. It demanded $4 million in Bitcoin within three days and warned that the amount would increase to $6 million if the initial deadline passed.
The writer threatened to kill Nancy if the later deadline was also missed and claimed that she would be released within 12 hours after the payment was completed. According to Reuters, the message included details apparently intended to demonstrate knowledge of the scene. It stated that Nancy’s wristwatch had been left on the floor near her bed and that a backyard floodlight had been damaged.
The sheriff’s department said the note contained distinctive patterns of vocabulary, syntax and phrasing that someone familiar with the writer might recognize.
A Second Message Claimed Nancy Had Died
Note 2 is below. 3/3 pic.twitter.com/T7hAro0ebR
— Pima County Sheriff’s Department (@PimaSheriff) July 31, 2026
A second message received by KOLD on February 6 claimed Nancy died shortly after she was taken because those responsible had underestimated the seriousness of her health problems. The writer said she had been buried “in nature” and ended the message with an apology to the family.
The Associated Press reported that the FBI had not publicly clarified whether both notes released by the sheriff’s department were considered authentic.
Other communications received during the investigation have been dismissed as extortion attempts, including messages sent by a California man who later pleaded guilty to federal harassment charges. Investigators hope their unusual wording may nevertheless help someone recognize the writer.
Nancy Guthrie Disappeared From Her Tucson-Area Home
Nancy was last seen at her Catalina Foothills residence on the evening of January 31. She was reported missing the following day after she failed to attend church and a friend contacted her family. Relatives found that her cellphone, wallet, hearing aids and essential medication had been left inside the home.
Blood later confirmed through DNA testing to belong to Nancy was discovered on the front porch. Investigators also recovered doorbell-camera footage showing an armed, masked man approaching the property and appearing to tamper with the camera.
The FBI has described Nancy as a vulnerable adult who has difficulty walking, uses a pacemaker and requires daily medication for a heart condition. The agency and the Pima County Sheriff’s Department continue investigating her disappearance as a kidnapping case. No suspect has been arrested.
Savannah Guthrie Begs the Public for Information
Savannah marked six months since her mother disappeared by asking anyone who recognizes the ransom-note language or noticed unexplained behavior by someone they know to contact investigators.
“We are begging for help. We are desperate,” the Today co-anchor wrote in an Instagram message. “We need someone to come forward.” Investigators have similarly asked the public to consider whether anyone changed their appearance, behavior, mood or daily routine around the time Nancy was taken.
The FBI’s current missing-person notice offers a reward of up to $100,000 for information leading to Nancy’s location or the arrest and conviction of anyone involved in her disappearance.