Nancy Guthrie’s Case, Seven Months On: Why a “Ransom” Note Still Doesn’t Fit a Classic Kidnapping

Nearly seven months after Nancy Guthrie vanished from her Tucson-area home, the most publicized pieces of writing in the investigation still raise as many questions as they answer. A Fox News report in late July focused on one of those problems: a purported first ransom note that demanded money, then immediately shut the door on any further contact. Retired FBI negotiator Jason Pack said that combination breaks a basic pattern seen in genuine ransom kidnappings.

This is a longer account of that reporting and the related public record that followed it — written in new language, but tied to the same facts.

What happened on the last night she was seen
Nancy Guthrie, 84, the mother of NBC Today co-anchor Savannah Guthrie, was last seen on the evening of Jan. 31, 2026, after family members dropped her off at her home in Tucson’s Catalina Foothills. She was reported missing the next day. Investigators have said they believe she was taken from the house against her will. Blood was later reported on the front porch. She left without her phone and without daily medication she needed for serious medical conditions, including a heart issue and limited mobility.

A masked person appeared on Nest doorbell video around the time she disappeared. The FBI later described that figure as about 5 feet 9 inches to 5 feet 10 inches tall, average build, carrying a black Ozark Trail hiking backpack. The person appears to have interfered with a camera at the house. No suspect has been publicly named. Authorities have not ruled out more than one person being involved.

By mid-August, local coverage marked roughly 200 days with no recovery and no arrest. Desert remains found about 15 miles from the home were publicly separated from the case; officials said there was no indication they were connected to Guthrie. Viral claims that federal authorities had “confirmed” she was murdered have also been treated as unverified. As of late August 2026, she remains missing.

Why the first note looked like a ransom — and why experts said it didn’t
The first widely discussed message was sent on Feb. 2 to local Tucson station KOLD and other media. It was addressed to Savannah. In the version later released by the Pima County Sheriff’s Department, the writer claimed to have Nancy, said she was “safe but scared,” set a seven-day window, demanded Bitcoin equivalent to $4 million by Feb. 5, then $6 million by Feb. 9, and threatened that she would be killed if the last ᴅᴇᴀᴅline pᴀssed. The same message said she would be dropped off in Tucson within 12 hours of payment. Then it cut off further contact: no negotiation, no more communication, and a warning that police would not help.

That last part is what Pack emphasized to Fox News. In a typical ransom kidnapping, he said, the people holding the victim usually want a line of communication to stay open. They need leverage, time, and a way to prove they still have the person. A demand that communication end immediately, before any payment and before any proof of life, does not match that playbook. Pack also said details about a damaged floodlight and the location of Guthrie’s Apple Watch showed knowledge of the house, but those details are not the same as proof that the victim was alive.

A second message, sent Feb. 6 and later released in full, changed tone. Addressed to the family, it claimed the writers had not understood how fragile her health was, said they never meant to hurt her, and stated that she died shortly after being taken, possibly from a heart-related cause. It said she had been “buried in nature” and that nothing the family could have done would have changed the outcome. It ended with an apology.

Authorities released both texts on July 31, 2026, not because they had settled the authenticity debate, but because they hoped someone would recognize the writer’s phrasing, sentence rhythm, and word choice.

The authenticity fight never fully closed
The notes have never had a single official verdict that the public can treat as final.

Reuters reported in late June that an FBI official, speaking anonymously, said the widely discussed kidnapping-related messages were not genuine. The FBI’s Phoenix office then posted a more careful line: some notes were extortion attempts without legitimacy; other ransom demands “may potentially be legitimate” and were still being investigated; the case itself continued to be treated as a kidnapping for ransom. Local authorities remained the lead.

One California man was separately arrested early in the case for sending a fake demand to another daughter, Annie Guthrie, and her husband. Investigators have said that episode was not the same as the notes sent to Tucson media. Later emails to TMZ, including one offering a phone pᴀssword in exchange for Bitcoin and claiming video of Guthrie on what the sender called “probably her last” day, were treated with open skepticism by Pima County Sheriff Chris Nanos.

In August, forensic psychologist Kris Mohandie told Fox he did not believe the ransom letters were real, while still saying investigators were right to examine them. Other commentators pointed to the polite, almost formal tone of the second note, the lack of proof of life, and the decision to send the first demand to a newsroom instead of opening a private channel with the family.

What investigators still have — and what they don’t
Public evidence remains thin. Mixed DNA from the scene has been described as difficult to separate. A glove found about two miles from the house was tested because it appeared similar to gloves seen on the masked figure in doorbell video; that was an early forensic lead, not a solved identification. Thousands of videos and tips have been collected. A Mexico-border grave tip in June produced no confirmed connection. Online theories about a second “porch guy,” a plumber, or other unnamed visitors have not been confirmed by police.

The family has repeatedly asked the public for help. Combined rewards have been reported above $1 million, including a large family offer plus FBI and Crime Stoppers money. Tip lines remain 1-800-CALL-FBI and the Pima County Sheriff’s Department at 520-351-4900. Tucson Crime Stoppers has also taken anonymous tips.

Why Pack’s point still matters
The Fox report did not claim to solve the case. It isolated one practical problem: if the first note was written by people who actually wanted a ransom, cutting off contact was a strange way to collect it. If the notes were written by someone else — a hoaxer, an opportunist, or a person trying to steer the investigation — then the “ransom” language may be a mask, not a motive.

Seven months later, that tension is still the public story. Nancy Guthrie has not been found. No one has been charged in her disappearance. The masked figure on the doorbell camera is still the main image released to the public. And the letters that first made the case look like a kidnapping for money remain, in official language, only part of an unfinished investigation.

Sources: Fox News