Nancy Guthrie Case: Purported Ransom Note Raises Questions About the Kidnapping Investigation

  • September 18, 2026

New details from a purported ransom note in the Nancy Guthrie case are raising questions about whether the communication follows the pattern normally ᴀssociated with a kidnapping for ransom. A retired FBI hostage negotiator who reviewed the reported contents said one particular demand — telling the family that there would be no further contact and no negotiation — stands out as highly unusual.

Nancy Guthrie, the 84-year-old mother of “Today” co-host Savannah Guthrie, disappeared from her home in Tucson, Arizona, on February 1, 2026. Investigators have treated the case as a kidnapping-for-ransom investigation, but Guthrie has not been found and authorities have never publicly confirmed that any ransom communication proves who abducted her or what ultimately happened to her.

According to excerpts of the first purported ransom note reported by Fox News, the writer claimed to have Guthrie and said she would be held for ransom. The message reportedly demanded $4 million in bitcoin, with a later ᴅᴇᴀᴅline requiring $6 million if the initial demand was not met. It also threatened that Guthrie would be harmed if the final ᴅᴇᴀᴅline pᴀssed.

The message contained several details that investigators considered significant. It reportedly referred to Guthrie’s white Apple Watch, which had been left near her bed, as well as a damaged floodlight at the rear of her home. Those details were not widely known at the time the message was sent, giving investigators reason to examine the communication more closely.

However, the reported wording also contained an unusual instruction. Rather than establishing a continuing channel through which the family could negotiate, the sender allegedly stated that there would be no further contact and no negotiation. The writer also warned the family not to involve law enforcement.

Jason Pack, a retired FBI supervisory special agent and former hostage negotiator, told Fox News that the demand was inconsistent with what investigators would typically expect in a conventional ransom kidnapping. In a normal kidnapping-for-ransom situation, he explained, an offender generally has an incentive to maintain communication because the victim is being used as leverage while the payment is negotiated.

The lack of a continuing communication channel therefore becomes an important question when examining the note. Pack said the sender appeared to use several familiar pressure tactics, including a ransom ᴅᴇᴀᴅline and threats, but the decision to end communication was difficult to reconcile with the usual objective of obtaining payment.

The case became even more complicated when a second purported note appeared several days later.

The second message reportedly abandoned the ransom demand and claimed that Guthrie had died shortly after being taken. The writer attributed her purported death to a heart-related medical problem and claimed that she had been buried “in nature.” The message also expressed regret and said the writer had not intended to harm her.

Authorities did not initially make the notes public. On July 31, roughly six months after Guthrie disappeared, the Pima County Sheriff’s Department released both messages in an effort to generate new information from the public. Investigators said they hoped someone might recognize the language, writing style or other details contained in the communications.

The release provided the public with the first complete look at the two messages, rather than the partial descriptions that had circulated through media reports during the investigation. Reuters reported that the first note was sent to a Tucson television station shortly after Guthrie disappeared, while the second arrived several days later. Both were eventually turned over to investigators.

Despite the attention surrounding the messages, authorities have repeatedly cautioned that not every ransom communication received during the investigation can be considered genuine. The FBI’s Phoenix office has said investigators received multiple ransom notes, with some determined to be extortion attempts without legitimacy while others remained under investigation. The bureau has continued to classify the case as a kidnapping-for-ransom investigation.

That distinction is important because the existence of a ransom note does not by itself establish that the writer was involved in Guthrie’s disappearance. Investigators have also dealt with people attempting to exploit the case by sending false or misleading communications.

At the same time, investigators have identified certain details in the messages that deserve closer examination. CBS News reported that the first note included information about Guthrie’s watch and the damaged floodlight at her home. The FBI had learned about the watch shortly after the note was sent, adding to questions about how the writer obtained that information. Investigators have also examined whether the two messages may have originated from the same source.

The notes have generated renewed debate over what they might reveal about the person behind them. Pack said the language appeared to suggest that the writer had familiarity with the home, but he cautioned that such information alone does not establish the idenтιтy of the sender or prove that the sender was directly responsible for the abduction.

Other experts have likewise emphasized that the authenticity of the communications remains an important unresolved issue. CBS News reported that retired FBI supervisory special agent Lance Leising considered the public release useful for generating tips but noted that investigators could still have questions about whether the messages were genuine.

The investigation has also produced a significant amount of physical and digital evidence. The FBI previously released doorbell-camera images showing a masked individual near Guthrie’s home around the time she disappeared. Authorities have appealed to the public for help identifying the person, who remains the only publicly described suspect connected to the disappearance.

In August, the release of the ransom notes produced a small increase in tips, according to the Pima County Sheriff’s Office. Investigators said they followed up on the new information as part of the continuing search for evidence that could explain what happened to Guthrie.

More than seven months after Guthrie disappeared, her whereabouts remain unknown. Her family continues to appeal for information, while investigators maintain that even seemingly minor details could become significant if they help establish who entered her home, where she was taken or what happened afterward.

For the Guthrie family, the unanswered questions remain particularly painful. The purported ransom messages provide possible clues, but they also introduce uncertainty over the motive, credibility and idenтιтy of the person who sent them. Until investigators can independently establish the authenticity and origin of those communications, the notes remain pieces of evidence under examination rather than definitive proof of what happened to Nancy Guthrie.

The investigation therefore continues on several fronts, with authorities examining the communications alongside surveillance footage, physical evidence and information submitted by the public. The reported contradictions within the ransom messages may ultimately prove important, but at this stage they do not establish whether the writer was the person responsible for Guthrie’s disappearance or whether the claims about her fate are accurate.

Sources: Fox News, CBS News.