As the search for Nancy Guthrie enters its second week, alarming details have come to light regarding a purported ransom demand. Local news outlet KGUN9 has reported that her alleged captors are asking for $6 million in Bitcoin. The deadline for this demand is set for 5 p.m. on Monday, with threats to her life should the ransom go unpaid.
In a video shared on Instagram over the weekend, Savannah Guthrie and her siblings expressed their willingness to pay the ransom. However, details about the ransom letter remain sparse, as KGUN9 has refrained from revealing further specifics to Fortune. Law enforcement agencies have yet to confirm the legitimacy of the ransom note.
Acquiring Bitcoin to fulfill the ransom would require the Guthrie family to open an account on a cryptocurrency exchange. Alternatively, they could transmit the funds through an intermediary. Either approach would necessitate transferring the specified amount to a wallet address designated by the captors. Bitcoin addresses, characterized by long strings of alphanumeric characters, can only be accessed with a corresponding private key controlled by the wallet owner.
The public nature of Bitcoin’s blockchain enables tracking of fund movements through various explorer sites, although the records do not disclose explicit identities or locations. Nonetheless, blockchain forensics firms can often connect addresses to specific exchanges or criminal groups. In some instances, law enforcement can intervene to seize funds or block transactions.
An expert from the blockchain analysis firm Crystal Intelligence has emphasized that prompt action from exchanges and law enforcement can be crucial in thwarting such financial demands.
Complicating matters, a retired FBI agent pointed out an unusual feature of the ransom note—specifically, the use of “USD” to denote dollars, which he suggested is atypical for an American. He speculated that this discrepancy could indicate the kidnappers’ foreign origin or that the note is potentially a fabrication. In addition, a separate note has already been deemed fake, resulting in the arrest of its sender, though authorities are still treating the KGUN9 letter as a credible threat.
Nancy Guthrie, the mother of “Today” show co-host Savannah Guthrie, was last seen on Saturday, January 31. The following day, concern grew when family members found her home deserted, with her phone, wallet, and daily medication left behind. Signs of forced entry and blood evidence further indicated that she was likely taken against her will. The Pima County sheriff’s office has not provided immediate comments on the situation.
President Donald Trump has commented on the case, stating that “we have some clues” regarding her disappearance and suggesting that updates might come “fairly soon,” describing the circumstances as a “horrible situation.”
A troubling trend has emerged in recent years where violent incidents linked to cryptocurrency, known as “wrench attacks,” have increased. These incidents often involve criminals targeting individuals who have publicly flaunted their crypto wealth, coercing them into divulging their Bitcoin credentials. However, the Guthrie case appears distinct, as there is no indication that Nancy Guthrie possesses any cryptocurrency assets.
