New Details Emerge About the Ransom Notes in the Nancy Guthrie Disappearance

The disappearance of 84-year-old Nancy Guthrie, the mother of “Today” show co-host Savannah Guthrie, has remained one of the most closely watched missing-person investigations of 2026. What initially appeared to be a kidnapping-for-ransom case became even more complicated as a series of messages began arriving in the days after Nancy vanished.

The ransom notes appeared to offer a possible explanation for her disappearance. But months later, questions surrounding their authenticity have only deepened the mystery.

The First Ransom Note

Nancy was last seen at her Tucson-area home after spending the evening with family on January 31, 2026. She was reported missing the following day under circumstances authorities described as concerning.

Shortly afterward, a message addressed to Savannah Guthrie was sent to a Tucson media outlet. The writer claimed Nancy was being held for ransom and demanded $4 million in Bitcoin.

The message reportedly contained specific details about Nancy’s home and belongings, details that initially made investigators take it seriously. It also established deadlines and warned of consequences if the demand was not met.

For a family desperate to know whether Nancy was alive, the message created a terrible combination of hope and fear. It suggested that Nancy might still be alive while simultaneously placing enormous pressure on her family.

The original draft of the case described the message as ending with an ominous “Or else,” reinforcing the sense that the sender was attempting to control the family’s actions.

A Second Message Changed Everything

Several days later, another message arrived.

Its tone was dramatically different. Instead of simply demanding money, the writer claimed Nancy had died shortly after she was taken and suggested that her death had been unintended.

That message transformed the public understanding of the case. Until then, the ransom demands had pointed toward a frightening but familiar scenario: an elderly woman abducted and held for money.

Suddenly, investigators and the public were confronted with a much darker possibility.

Savannah’s public appeals also took on new meaning as the family struggled to determine whether the messages were genuine and whether Nancy was still alive. The uncertainty was particularly painful because the family had no reliable proof of Nancy’s condition.

The FBI’s Complicated Assessment

The ransom-note story became even more confusing in July.

Reuters reported that federal investigators had determined that three messages connected to the alleged kidnapping were fake. The report said the first two notes came from the same source and that investigators had, among other steps, tested the cryptocurrency instructions without the test funds ever being collected.

But shortly afterward, the FBI clarified that the situation was more nuanced.

The agency said some ransom-related messages had been determined to be illegitimate extortion attempts, while other ransom demands remained potentially legitimate and were still being investigated. Most importantly, authorities continued to investigate Nancy’s disappearance as a kidnapping for ransom case.

That distinction matters.

It means the public should not automatically assume that every message connected to the case was fake—or that the ransom-note investigation has been completely dismissed.

Authorities Release the Notes to the Public

Then came another major development.

On July 31, roughly six months after Nancy disappeared, the Pima County Sheriff’s Department released two ransom notes publicly.

Authorities said they were not simply releasing the messages for their content. They were interested in the language itself.

According to investigators, the notes contain distinctive patterns in word choice, syntax and phrasing that could reflect the writer’s individual linguistic style. Officials hoped that someone who knows or has interacted with the writer might recognize those characteristics.

That move effectively turned the public into another investigative resource.

Someone may have seen the wording before. Someone may recognize the unusual way certain sentences were constructed. Or someone may know a person whose language suddenly changed after Nancy disappeared.

Authorities emphasized that it is not too late for someone with information to come forward.

The Notes Contained Details From Inside Nancy’s Home

One reason the first message initially attracted investigators’ attention was the presence of details that appeared difficult for a complete outsider to know.

The note reportedly referred to a white smartwatch near Nancy’s bed and a damaged floodlight in the backyard. Those details helped make the message appear potentially credible during the early stages of the investigation.

That raises an important unanswered question:

How did the writer know what they appeared to know?

Was the information obtained directly from someone involved in the disappearance? Was it gathered from the property? Or did the writer have another source of information?

Investigators have not publicly provided a complete answer.

The Physical Evidence Remains Important

The ransom messages are only one part of the investigation.

Nancy’s home and surveillance systems produced other clues. Authorities recovered doorbell-camera footage showing an unidentified masked individual near the property. Investigators have also examined DNA and other physical evidence.

The original case chronology notes that Nancy’s blood was found near the front door, while later DNA testing of a glove associated with the investigation failed to produce a match in the national database.
Authorities have also suggested that surveillance footage may indicate the unidentified man had been near Nancy’s home before the night she disappeared. That possibility has raised questions about whether the abduction was planned rather than spontaneous. Recent reporting says investigators believe two pieces of doorbell-camera footage may have been recorded on separate days.

Six Months Later, There Is Still No Final Answer

By the end of July and into August, Nancy Guthrie had been missing for approximately six months.

The release of the ransom notes generated a slight increase in tips, according to authorities, but investigators said none had yet cracked the case.

That leaves the central mystery unresolved.

Who took Nancy?

What happened after she disappeared?

Who wrote the ransom messages?

And, perhaps most importantly, did the writer have genuine knowledge of Nancy’s disappearance—or was someone deliberately attempting to mislead investigators and exploit a grieving family?

Those questions remain unanswered.

The Search Continues

The ransom notes may have changed the direction of the investigation several times, but they have not provided the closure Nancy’s family desperately needs.

The case remains active, and authorities continue to seek information about the person seen near Nancy’s home and anyone who may have knowledge of her disappearance.

For Savannah Guthrie and her family, the story has never really been about the ransom itself. It has always been about Nancy.

The public has seen the messages, the surveillance footage, the rewards and the investigative leads. But behind all of those clues is an 84-year-old mother who disappeared from her own home and has still not been found.

And after months of uncertainty, one question continues to hang over the investigation:

What really happened to Nancy Guthrie?