Nancy Guthrie: Sheriff Flags Disturbing “Wrench Attack” Report To Investigators | 135 Days Missing

YouTube · 6IpLbpehgNY

Quick Read

This episode exposes the alarming rise of 'wrench attacks' where criminals use physical violence and torture to extract cryptocurrency passwords, potentially linking to the disappearance of Nancy Guthrie.
Global criminal networks are employing local thugs for 'wrench attacks,' using physical violence to force victims into revealing cryptocurrency passwords.
The Nancy Guthrie disappearance is being investigated under the 'proxy target' theory, where a vulnerable relative is targeted to extort a wealthier family member.
Personal security must now extend beyond digital firewalls to include physical vigilance, online footprint management, and family communication protocols.

Summary

The episode delves into 'wrench attacks,' a new crime trend where global criminal enterprises commission local thugs to physically torture individuals or their relatives (proxy targets) to obtain cryptocurrency passwords. Host Ashleigh Banfield and security expert Spencer Corson discuss real-world examples, including a Chinese entrepreneur found buried and an Italian national tortured for three weeks in New York. The Pima County Sheriff's Office has flagged a report on these attacks to investigators in the Nancy Guthrie missing person case, suggesting she could be a proxy target for someone else's digital assets. Corson provides actionable advice on personal security, emphasizing self-auditing, reducing online exposure, and establishing family distress phrases to combat this physical threat to digital wealth.
The rise of 'wrench attacks' signals a dangerous evolution in financial crime, shifting from purely digital hacking to physical violence and torture. This trend makes individuals with significant digital assets, or their vulnerable family members, direct targets for kidnapping and extortion. Understanding these methods is crucial for personal security, as traditional digital safeguards are insufficient against physical coercion, necessitating a re-evaluation of how we protect our digital wealth and loved ones.

Takeaways

  • "Wrench attacks" involve physical violence to force individuals into revealing digital account passwords, particularly for cryptocurrency.
  • These attacks are orchestrated by high-level global criminal enterprises that hire low-level local thugs.
  • The CertiK research group identified a rise in these attacks in 2026, including cases like 'Silly Tuna' (UK) and Young Wang (Turkey).
  • Nancy Guthrie's disappearance is being considered a potential 'proxy target attack,' where she was targeted to extort a wealthier family member.
  • Pima County Sheriff Chris Nanos has flagged the CertiK report to the Nancy Guthrie investigative task force.
  • Security expert Spencer Corson emphasizes that digital assets are only as secure as the person who holds the access credentials.
  • Protecting oneself requires auditing personal online exposure, assessing physical risks, and implementing safeguards like distress phrases for family communication.

Insights

1The Emergence of 'Wrench Attacks' in Crypto Crime

A new and disturbing trend, 'wrench attacks,' involves criminals using physical violence, kidnapping, and torture to force victims to reveal cryptocurrency passwords. This method bypasses complex digital hacking by exploiting human vulnerability, making it the 'path of least resistance' for sophisticated criminal networks.

CertiK, a research group, published a report detailing the rise of these attacks, citing cases like 'Silly Tuna' who lost $25 million in crypto after being physically forced, and Young Wang, a Chinese entrepreneur found buried after a crypto asset dispute.

2Nancy Guthrie Case Potentially Linked to Proxy Target Attacks

While Nancy Guthrie, an 84-year-old, might not have had a large crypto portfolio herself, her disappearance is being considered under the 'proxy target attack' theory. This involves targeting a vulnerable relative to extort a wealthier family member (like her daughter, Savannah) for their digital assets.

The CertiK study included Nancy Guthrie's case as a potential proxy target. Pima County Sheriff Chris Nanos confirmed he flagged this report to the investigative task force, acknowledging the relevance of this new crime trend to the ongoing investigation.

3Shift from Digital Hacking to Physical Coercion

The nature of financial crime has regressed to 'old-school mobster stuff,' where physical intimidation and torture are preferred over complex digital hacking. Criminals find it easier to pressure a person for credentials than to crack sophisticated digital codes, leading to a resurgence of brutal tactics for digital gains.

Spencer Corson, a security expert, states, 'It's really difficult to crack the code, but it's really easy to put pressure on the person.' He draws parallels to 1990s mob tactics and kidnap-for-ransom exploits seen in Afghanistan and Iraq.

4Importance of Personal Security and Online Footprint Management

Individuals must actively participate in their own protection by auditing their public persona, understanding how much personal information is shared online, and assessing their physical environment. This proactive approach helps reduce vulnerabilities that criminals exploit to plan attacks.

Corson advises, 'If I was going to attack me, how would I do it?' and highlights how shared online details (birthdays, high school, first car) can be used for password resets or to track movements, as seen with public figures like the Kardashians.

Bottom Line

The 'champagne effect' in criminal operations involves high-level perpetrators renting expensive properties or displaying wealth to lure high-value targets, masking their true intentions and making the victim feel secure before initiating a wrench attack.

So What?

This tactic exploits social trust and the desire for perceived legitimacy, making it harder for targets to identify threats in seemingly affluent or professional settings.

Impact

Security awareness training should include recognizing these 'pre-attack' social engineering tactics, especially for individuals in high-net-worth circles or those involved in industries like crypto where such events are common.

Key Concepts

Wrench Attack

A crime strategy where physical violence or the threat of it is used to force an individual to give up digital access credentials (e.g., cryptocurrency passwords), bypassing traditional digital hacking methods.

Proxy Target Attack

A variant of the wrench attack where a vulnerable relative or associate of a wealthy individual is targeted and threatened to coerce the primary target into revealing digital assets or paying a ransom.

FOIL Assessment Framework

A method for personal security assessment: 'First' impressions (how you appear to the world), 'Outers' (external security of your environment), 'Inners' (internal security and visibility), and 'Lasting' impressions (identifying persistent vulnerabilities or concerns).

Lessons

  • Audit your online presence: Regularly review social media and public information to minimize personal identifying details that could be used for password resets or tracking.
  • Establish family distress phrases: Create a unique, subtle code word or phrase with close family members that signals duress without alerting a captor, for use in phone calls or messages.
  • Implement a '9 PM routine' for home security: Consistently check all doors, windows, and security systems (alarms, motion lights, cameras) nightly to ensure operational readiness and identify anomalies.

The FOIL Method for Personal Security Assessment

1

**First Impressions (F):** Assess how you, your home, or your lifestyle appear to the outside world. Do you project wealth, vulnerability, or a strong protective posture?

2

**Outers (O):** Evaluate the external security of your environments (home, workplace, gym, travel routes). Look for access control, lighting, and visibility that might deter or attract criminals.

3

**Inners (I):** Examine the internal security and visibility within these environments. Can you see potential threats? Are there dark stairwells or blind spots? Can others see you when you're vulnerable?

4

**Lasting Impressions (L):** Reflect on any lingering concerns or 'weird' feelings about your security. These are often subconscious indicators of vulnerabilities that need attention, especially regarding areas you worry about most but work on least.

Quotes

"

"Effectively, what a wrench attack is, is pressuring someone through physical violence to give up information like a password in order to get into someone's accounts and rob them blind."

Ashleigh Banfield
"

"It's really difficult to crack the code, but it's really easy to put pressure on the person."

Spencer Corson
"

"Your unwillingness to offend someone should never be stronger than your willingness to defend yourself."

Spencer Corson

Q&A

Recent Questions

Related Episodes

“Start From The INSIDE” Savannah Guthrie Faces Ransom Deadline After Mom Kidnapped
Piers Morgan UncensoredFeb 9, 2026

“Start From The INSIDE” Savannah Guthrie Faces Ransom Deadline After Mom Kidnapped

"An expert panel, including former FBI profilers and criminologists, dissects the unprecedented and perplexing kidnapping of Savannah Guthrie's 84-year-old mother, Nancy, highlighting the challenges of an investigation with no clear suspects, proof of life, or direct communication from abductors."

KidnappingExtortionMissing Persons+2
Profiler calls Nancy Guthrie note ‘poetic’ — thinks woman wrote it — also latest on bitcoin search
BRIAN ENTIN INVESTIGATESJun 29, 2026

Profiler calls Nancy Guthrie note ‘poetic’ — thinks woman wrote it — also latest on bitcoin search

"A criminal profiler and a cybersecurity executive dissect the Nancy Guthrie ransom notes and the untraceable Bitcoin demand, revealing insights into the perpetrators' psychology and the challenges of digital crime investigations."

Criminal ProfilingMissing PersonsRansom Notes+2
Bombshell New Details: Ransom Note Claims Nancy Was "Buried With Nature" | Nancy Guthrie Missing
Drop Dead Serious with Ashleigh BanfieldJun 23, 2026

Bombshell New Details: Ransom Note Claims Nancy Was "Buried With Nature" | Nancy Guthrie Missing

"New reports reveal the second ransom note in the Nancy Guthrie disappearance claimed she died unintentionally and was 'buried with nature,' sparking questions about delayed media reporting and the FBI's handling of potential informants."

True CrimeMissing PersonsKidnapping+2
Recording Scary FIRST DATE Stories!!!
The Lets Read PodcastJun 22, 2026

Recording Scary FIRST DATE Stories!!!

"Four terrifying first-date stories expose the dark side of modern dating, from stalkers and cheating spouses to drug-spiking and gang violence, revealing critical lessons in vigilance and self-preservation."

Dating SafetyStalkingCheating+2