In a brief but significant update on the ongoing search for Nancy Guthrie, TMZ founder Harvey Levin told CNN on that the Bitcoin account tied to the first alleged ransom note showed activity as of Monday night, offering the most concrete indicator yet that something may be happening behind the scenes in the high-profile case.
Local Tucson news outlet KGUN reported that the activity was for less than $300.
Levin Gives An Update on the Wallet
Levin, who received one of the suspected ransom notes early in the investigation, spoke with CNN’s Erin Burnett and shared that as of “a few minutes ago” — in the context of the live broadcast — he saw movement in the cryptocurrency wallet that had been publicly associated with the ransom demand.
He did not disclose details about the amount, timing or nature of that movement, saying only that this was “all he is going to say on it” during the segment.
Levin’s statement came as the original ransom deadline tied to one of the notes had already passed with no confirmed payments, and the FBI has said that the suspected kidnappers had not been in contact with the Guthrie family since the final deadline expired.
The first note reportedly demanded millions of dollars in Bitcoin to secure her release, but — as of the earlier reported deadlines — no funds had been deposited into the publicly visible address investigators and media outlets were monitoring.
Experts have previously cautioned that the absence of visible Bitcoin transactions does not necessarily mean no activity has occurred, since funds can be moved between wallets or converted into other cryptocurrencies, making tracking more complicated.
Law Enforcement Continue to Search for Nancy
The activity came just hours after video of the suspect was released to the public.
The FBI and the Pima County Sheriff’s Department have been leading the investigation into Guthrie’s disappearance, which began on Jan. 31, 2026, when she was last seen at her Tucson home.
Authorities have treated the case as a suspected abduction and have recovered evidence at the scene that supports that conclusion. The family — including daughter and “Today” show co-anchor Savannah Guthrie — issued emotional public pleas for help as the investigation progressed.
Despite the renewed attention to the ransom-linked Bitcoin wallets, officials have emphasized that no suspect has been publicly identified, no proof of life has been provided, and law enforcement continues to ask anyone with relevant information to contact investigators.
What exactly the Bitcoin wallet activity indicates — whether it reflects a ransom payment, a trap, an error, or unrelated movement — remains unclear.
But Levin’s brief confirmation that there has been movement in the account has reignited public interest and underscores the evolving nature of the search for Guthrie.
Authorities continue to follow leads and have not ruled out any possibilities as they work toward locating her and understanding the full context of the case.
1 thought on “BREAKING UPDATE: Movement Reported in Bitcoin Ransom Wallet Tied to Nancy Guthrie”