An anonymous emailer claiming direct knowledge of Nancy Guthrie's abduction says he possesses video footage of "the main guy" with the 84-year-old woman on what the sender describes as the last day of her life, and is demanding one Bitcoin to hand it over.
TMZ founder Harvey Levin revealed on "The Will Cain Show" that he has received roughly a dozen emails from the same unidentified sender since the early days of the case. The latest message arrived Friday and escalated the sender's claims well beyond earlier demands, which had sought various sums up to $100,000. Now the ask is a single Bitcoin, worth approximately $60,000 as of Friday afternoon, in exchange for a phone the sender says is stashed in a secure location.
The FBI is not paying. And a retired FBI supervisory agent says the whole thing may be either a fraud or the work of someone too reckless to think straight. But with Nancy Guthrie's whereabouts still unknown months after her suspected kidnapping from her Tucson, Arizona home, investigators cannot afford to dismiss it outright, and that tension sits at the center of a case that has produced more dead ends than answers.
The sender's own words, as Fox News Digital reported, paint a detailed picture of what he says is on the phone:
"I have a phone stashed in a secure location guaranteeing both the information it stores and the safety of the phone. What it contains is my definition of delivering them on a silver platter, a short video of the main guy with Nancy the day that was probably her last, pictures of both involved, names and addresses and age."
The sender claims two kidnappers carried out the abduction. For one Bitcoin, the emailer says, he will lead authorities to the phone, provide its password, and hand over the names and addresses of both alleged kidnappers.
Levin told Will Cain that TMZ's IT team spent hours working alongside FBI agents trying to trace the sender. The emails were authenticated as coming from the same individual based on a Bitcoin account included in earlier messages, an account that had not been publicly revealed, giving TMZ confidence the correspondence is at least internally consistent.
That does not mean the claims are real.
Jim Clemente, a retired FBI supervisory agent, offered a sharp critique of the sender's logic. Savannah Guthrie, Nancy's daughter and co-host of NBC's "Today," has offered more than $1 million for her mother's safe return. Tucson's Crime Stoppers affiliate, 88-Crime, is offering an additional $102,500 for information leading to an arrest, money that can be claimed anonymously. Together, the rewards exceed $1.2 million.
Clemente put it plainly:
"Either the author of those emails is a complete fool or it's completely fake. Why would you offer up exactly what the Guthrie family has been looking for and offered a $1 million reward for an exchange for one Bitcoin when if you actually give them the information that they need and that you say you have, you can get $1 million instead? In Bitcoin if you want it."
The math does not add up. A person genuinely holding evidence worth over a million dollars in reward money is instead demanding roughly $60,000, and doing so through a channel that requires trusting TMZ and the FBI to pay up. Clemente's skepticism is well-earned.
The case has already attracted scrutiny of ransom note language patterns as investigators try to separate authentic communications from opportunistic fakes.
Levin did not simply sit on the latest email. Earlier Friday, he posted a video online directly addressing the anonymous sender, urging: "If you've got something, send it." The message was a public challenge, prove you are not a fraudster.
The sender was watching. A couple of hours later, a response came back. Levin relayed it on air:
"He responded a couple hours later. He had seen the post. He said, 'I'm not gonna do it, because the metadata is gonna lead authorities to me.'"
That refusal is telling. If the sender genuinely possesses evidence of a kidnapping and is not himself involved in the crime, the metadata concern is secondary to the $1.2 million in available rewards, or, for that matter, to the moral weight of helping find an 84-year-old woman. The sender's reluctance to provide proof without payment first is either the caution of someone entangled in criminal activity or the evasion of someone running a con.
The sender also took pains to distance himself from a separate false lead, writing: "I am not the idiot who recently called in a tip about her burial site in Mexico." That reference suggests the emailer is closely following media coverage of the case, and is aware that bogus tips have already wasted investigative resources.
Nancy Guthrie was suspected of being abducted from her Tucson home in late January 2026. AP News reported that investigators found signs of forced entry consistent with a nighttime kidnapping. Her cellphone, wallet, and car were all left behind. DNA samples were gathered and submitted for analysis, but Pima County Sheriff Chris Nanos said at the time that results had "nothing to indicate any suspects."
The investigation has been marked by friction from the start. The FBI was reportedly blocked from the case for four critical days in its earliest phase, a delay that may have cost investigators their best window to recover physical evidence and electronic trails.
Since then, the trail has gone cold and hot in frustrating cycles. Just The News reported that the FBI believes at least one ransom note demanding millions of dollars in Bitcoin is authentic, a communication believed to come from the actual kidnapper. A second note claimed Nancy Guthrie died shortly after the abduction, describing her death as unintentional. The authenticity of that second note has not been confirmed.
Separately, the Washington Examiner reported that TMZ received a fourth anonymous note from a man claiming Nancy Guthrie was in Mexico and that he had seen her "south of the border" five days earlier. Previous notes from that sender demanded $50,000 in Bitcoin in exchange for the kidnapper's identity. All three prior messages used different names but the same Bitcoin address.
The pattern is now unmistakable: anonymous senders demanding cryptocurrency, offering tantalizing but unverified claims, and refusing to provide proof without payment. Whether any of these individuals possess genuine information remains an open question.
Both the FBI and the Pima County Sheriff's Department declined to comment on the latest TMZ emails. That silence is standard practice in active investigations, but it does nothing to reassure a public that has watched this case drag on for months with no arrest and no recovery.
Sources close to the investigation, as Fox News Digital reported, remain divided. Some investigators believe all the ransom demands are bogus. Others are reluctant to reach that conclusion while Nancy Guthrie's whereabouts remain unknown. That split reflects the fundamental problem: without a body, without a confirmed sighting, and without a suspect in custody, every lead, no matter how dubious, must receive at least a baseline of attention.
The Pima County sheriff has pointed to lab delays and process bottlenecks as reasons for the investigation's slow pace. Meanwhile, FBI-released photos from February 10, 2026 showed an armed individual reaching toward a Google Nest camera at Nancy Guthrie's front door, imagery that raised more questions than it answered.
Earlier in the case, Harvey Levin described a ransom note that contained specific details about the interior of Nancy Guthrie's home. Breitbart reported Levin's assessment that the note was "not a letter that was thrown together in a couple of minutes" and was "not AI." Whether that note and the latest batch of emails come from the same source, or from entirely different opportunists, remains unclear.
The crypto-linked dimensions of this case have drawn attention from cybersecurity analysts, who flagged the abduction as potentially connected to so-called "wrench attacks" targeting cryptocurrency holders.
Set aside the question of whether the emailer's claims are true. His behavior alone tells a story.
He has sent roughly a dozen messages. He has shifted his financial demands downward, from $100,000 to one Bitcoin worth $60,000. He refuses to share even a frame of the alleged video without payment. He is monitoring news coverage closely enough to respond to Levin's public challenge within hours. And he knows enough about digital forensics to cite metadata concerns as his reason for withholding proof.
That profile could describe someone with genuine proximity to the crime who is terrified of exposure. It could also describe a sophisticated scammer exploiting a high-profile tragedy for a payday. The FBI's job is to determine which, and to do so without tipping off a potential suspect or rewarding a potential fraud.
Savannah Guthrie returned to "Today" after a roughly two-month absence following her mother's disappearance. The family's $1 million reward offer remains on the table. The FBI tip line, 1-800-CALL-FBI, and the 88-Crime anonymous tip line at 1-520-882-7463 remain active.
The Washington Times noted that TMZ authenticated the email series as coming from the same sender behind previous correspondence, adding what it called "a new dimension" to the unresolved case. But authentication of a sender's identity is not authentication of a sender's claims. The two are very different things, and conflating them would be a mistake.
The Nancy Guthrie case now sits in a grim limbo. An 84-year-old woman is missing. At least one ransom note may be genuine. An anonymous emailer claims to hold video evidence and the identities of two kidnappers. The FBI is investigating but not paying. Local law enforcement is not talking. And the family is left to wait.
When a case this serious attracts this many anonymous demands for cryptocurrency, it tells you something about the world we have built, one where digital anonymity can be weaponized against the desperate, and where the people with the least to lose can extract the most from those with everything on the line.