Nancy Guthrie Case: Crypto Ransom Link Emerges as Investigation Continues, June 15
Key Points
Nancy Guthrie, 84, missing since January 31 from Tucson, Arizona home.
Cybersecurity firm CertiK linked abduction to $6 million Bitcoin ransom demand on June 13.
Blood found at scene tested positive as hers; mixed DNA recovered from property.
Investigation remains active with no suspect named; FBI offering $100,000 reward.
A retired FBI agent disclosed a major development in the Nancy Guthrie case on June 13 when cybersecurity firm CertiK classified her abduction as a targeted kidnapping linked to a $6 million Bitcoin ransom demand. The 84-year-old was last seen at her Catalina Foothills home in Tucson, Arizona on January 31 and reported missing February 1. The Pima County Sheriff’s Department and FBI continue investigating with no suspect named to date.
Cybersecurity Firm Links Abduction to Bitcoin Ransom
CertiK, a leading crypto security company, designated Nancy Guthrie’s abduction as a “wrench attack by proxy” on June 13, according to retired FBI agent Jennifer Coffindaffer. The firm stated in a public report that the 84-year-old was kidnapped as part of a $6 million Bitcoin ransom demand, illustrating a documented trend of proxy target selection identified in CertiK’s 2025 report.
Coffindaffer, a NewsNation contributor, called this “the biggest public break in Nancy’s case” and speculated whether law enforcement knows if Savannah Guthrie has a Bitcoin account. She noted that how these networks operate is new to law enforcement.
Timeline and Physical Evidence
Nancy Guthrie was last seen on January 31 after being dropped off at her home. She was reported missing the next day when she failed to appear at a friend’s house for a virtual church service. Blood found outside her front door tested positive as hers, and investigators recovered mixed DNA from her property belonging to multiple people.
Security footage captured a masked suspect on her front porch approximately 45 minutes before her abduction, appearing to tamper with the surveillance device. Authorities believe she was taken around 2:30 a.m. when her pacemaker disconnected from her cellphone, which was left behind.
Ransom Demands and Family Response
Unverified ransom notes demanding millions in Bitcoin were sent to multiple media outlets early in the investigation, though their authenticity has not been confirmed. Savannah Guthrie responded to two messages she believed were legitimate through pleading video posts. The family later offered a $1 million reward for information leading to Nancy’s recovery.
On June 7, Savannah posted an emotional update on Instagram Stories, writing “Oh my, my soul it cries out” alongside religious artwork and the plea “Bring her home.” The FBI is offering a $100,000 reward for information leading to her recovery or the arrest of anyone involved.
Investigation Status and Medical Concerns
The Pima County Sheriff’s Department confirmed the investigation remains active and ongoing as of June 15. Sheriff Chris Nanos stated he believes police know the motive behind Nancy’s alleged abduction but declined to offer details citing the integrity of the investigation. DNA evidence has been submitted to the FBI’s lab for advanced testing.
Authorities have warned that Nancy takes daily medication, and if she does not receive it, “that could, in itself, prove fatal.” No arrests have been made, and two individuals detained during the investigation were quickly released. Anyone with information is urged to contact 1-800-CALL-FBI, 88-CRIME, or the Pima County Sheriff’s Department at 520-351-4900.
Final Thoughts
A cybersecurity firm’s identification of a $6 million Bitcoin ransom link marks the first major public breakthrough in Nancy Guthrie’s four-month disappearance. Law enforcement continues investigating with no suspect named, while the family awaits answers.
FAQs
Nancy Guthrie was last seen at her Catalina Foothills home in Tucson, Arizona on January 31, 2026, and reported missing the following day.
A targeted kidnapping where a family member is abducted to extort cryptocurrency from a relative with significant Bitcoin holdings, per CertiK’s 2025 report.
CertiK identified a $6 million Bitcoin ransom demand linked to the abduction, based on unverified ransom notes sent to media outlets.
Disclaimer:
The content shared by Meyka AI PTY LTD is solely for research and informational purposes. Meyka is not a financial advisory service, and the information provided should not be considered investment or trading advice.
About Author

Huzaifa Zahoor
Co FounderHuzaifa Zahoor is the engineer who built Meyka. He has spent years writing Python, training AI models, and building data pipelines specifically for financial markets. His technical articles have reached over 30,000 readers on Medium, so he knows how to make complex things easy to follow. If this article touches on how the tools work, he is the person who actually built them.
What brings you to Meyka?
Pick what interests you most and we will get you started.
I'm here to read news
Find more articles like this one
I'm here to research stocks
Ask Meyka Analyst about any stock
I'm here to track my Portfolio
Get daily updates and alerts (coming March 2026)