Bitcoin account tied to first Nancy Guthrie ransom note saw 'activity', TMZ's Harvey Levin reveals
BREAKING: TMZ's Harvey Levin says there is activity for the first time in the bitcoin account that was set up to accept funds for the return of Nancy Guthrie.
— Collin Rugg (@CollinRugg) February 11, 2026
CNN: "I know you have still been checking for any payments. What are you seeing?"
Levin: "So about 12 minutes ago, we… pic.twitter.com/GyRPmw2Xmi
TUCSON, ARIZONA: New developments have emerged in the disappearance of Nancy Guthrie after an activity was detected in a Bitcoin account linked to a purported ransom note sent to media outlets.
The activity has raised further questions as law enforcement continues to investigate the case. Nancy, the 84-year-old mother of 'Today' show host Savannah Guthrie, has been missing since January 31, and investigators believe she was taken against her will.
Harvey Levin reports Bitcoin account activity in Nancy Guthrie ransom case
TMZ founder Harvey Levin told CNN that the Bitcoin account attached to the first ransom note for Nancy saw activity late Tuesday, February 10. Levin’s outlet received a purported ransom letter last Tuesday, along with several other media outlets.
He claimed the note set a Monday night deadline to send $6 million to a Bitcoin account, but that deadline has now passed. However, videos released by Savannah and her siblings have claimed the possible kidnapper had not given them a mode of communication.
According to Levin, the Bitcoin account saw activity on Tuesday, Feb 10, around 7.15 pm ET. “About twelve minutes ago, we saw activity in that account,” Levin told CNN’s Erin Burnett.
New images in the search for Nancy Guthrie:
— FBI Director Kash Patel (@FBIDirectorKash) February 10, 2026
Over the last eight days, the FBI and Pima County Sheriff’s Department have been working closely with our private sector partners to continue to recover any images or video footage from Nancy Guthrie’s home that may have been lost,… pic.twitter.com/z5WLgPtZpT
When pressed for more details about the nature of the activity, Levin said he could not clarify further, “Well, it would only show, as I understand this, money going in. And the only thing you would see is money. And Erin, that’s all I can say.”
KGUN 9, a local station that also received one of the notes, similarly claimed to have seen activity in the account linked to the ransom letter. The outlet reported that the activity was less than $300.
Law enforcement have not confirmed the credibility of the ransom notes despite being pressed on the matter during a Thursday press conference.
Ransom note and ongoing investigation into Nancy Guthrie’s disappearance
Videos and images released by the FBI on Tuesday, February 10, in the case gave investigators and the public their first glimpse of who was outside her home. In one of the videos, a person wearing a backpack and a ski mask can be seen tilting their head down and away from a doorbell camera while nearing an archway at Nancy's home.
The footage also shows the person holding a flashlight in their mouth and attempting to cover the camera with a gloved hand and part of a plant ripped from her yard. The images, however, do not show what happened to Nancy or help determine her condition.
Authorities have said DNA tests showed that blood found on her porch was hers. Officials have also stated that Nancy has high blood pressure and issues with mobility and her heart, and she requires daily medication.
"My sense is... whoever sent this letter is based in the Tucson area."
— Erin Burnett OutFront (@OutFrontCNN) February 6, 2026
TMZ's Harvey Levin tells OutFront a sentence in the Nancy Guthrie ransom letter leads him to believe the person who wrote the note is based locally. pic.twitter.com/9DQfCfhYu5
Levin previously shared a line from an alleged ransom note connected to Nancy’s disappearance, saying, “I’ll read you one line from the ransom note we received” during an interview with Burnett after a second ransom deadline had passed.
He said, “They say, ‘It is in the best interest of everyone to have this completed as soon as possible.’”