Physical Address
304 North Cardinal St.
Dorchester Center, MA 02124
Physical Address
304 North Cardinal St.
Dorchester Center, MA 02124

The Bitcoin (BTC) wallet referenced in the ransom note sent to the media after the disappearance of Nancy Guthrie has shown activity for the first time.
New details continued to emerge, and public interest in the case grew beyond the efforts of law enforcement. Traders began to place bets on the Polymarket market prediction platform linked to the case. This raises ethical concerns about speculation rather than an active investigation.
Sponsored
Sponsored
Nancy Guthrie, the mother of “Today” show host Savannah Guthrie, was kidnapped from her home in the Catalina Foothills in Tucson, Arizona, BeINCrypto reported. She was last seen on January 31 and was reported on February 1.
Authorities discovered bloodstains near the entrance to the residence. Guthrie’s phone, wallet, medication and car were left behind. The FBI is assisting the Pima County Sheriff’s Department in the investigation.
After the hijacking, allegations of ransomware communications began to emerge. Tucson’s local CBS station KOLD received an email containing a ransom note on the evening of February 2, People magazine reported.
The letter demanded $4 million in Bitcoin by February 5 for Nancy’s safe return, and $6 million by February 9 if the initial payment is not made. Sources reported that the memo warned of dire consequences if the second deadline passed without payment.
Entertainment news site TMZ reported receiving the same email the next day. The FBI confirmed via the BBC that it was taking seriously the ransomware email sent to US media, which indicated a Monday deadline.
On February 9, Phoenix FBI spokesman Connor Hagan said the agency was “not aware” of any ongoing contact between the Guthrie family and the alleged kidnappers.
FBI Director Kash Patel also released surveillance video related to the case as authorities enter the second week of their search for Guthrie.
Sponsored
Sponsored
Meanwhile, TMZ reported that the Bitcoin wallet mentioned in the ransom note showed recent activity. However, he did not reveal the exact amount.
TMZ wrote that we saw activity for the first time on the Bitcoin account mentioned in the first ransom note, which was sent to us here at TMZ, as well as to two TV stations in Tucson. For various reasons, we will not disclose the amount.
Sponsored
Sponsored
A small transaction, estimated to be hundreds of dollars, was apparently sent to the Bitcoin wallet mentioned in the ransom note, People said, citing a source.
Although Bitcoin transactions are publicly recorded via… BlockchainRansom payments are not always easy to trace. Identifying the person behind a wallet address usually requires additional investigative tools and cooperation from trading platforms.
In some cases, the attackers resort to the transfer of funds between several wallets, transferring through different platforms, or they go through digital currency mixes, with the intention of hiding the traces of the operations. While transparency in blockchain helps investigators, attempts to camouflage or stack transactions greatly complicate the tracking and recovery process.
Sponsored
Sponsored
The case also appeared on the market forecasting platform Polymarket, where users place bets on the term for a possible arrest.
The market, titled Will Nancy Guthrie’s Kidnapper Be Arrested by February 28?, was created on February 10, 2026 at 1:04 PM EST. Traders currently estimate the probability of a stop on that date at around 78%, with the odds fluctuating rapidly.
It causes the emergence of an active market Linked to a real-time kidnapping investigation Broader ethical issues. Turning a sensitive and ongoing criminal case into a financial tool for speculation underestimates the gravity of the situation.
These markets also potentially encourage the spread of misinformation, amplify rumors, or distort public perception while law enforcement efforts are underway.
These platforms are often identified as prediction-gathering tools, but the feasibility of their use in active criminal investigations continues to be debated, especially when this directly impacts victims and their families.