BizeconAnalysis
Fast mobile article powered by Nexiamath-SEO AMP.
AMP Article

Nancy Guthrie ransom notes likely came from abductor who said she died, investigators believe

Published June 23, 2026 · Updated June 23, 2026 · By Barbara Thomas

Nancy Guthrie Ransom Notes Likely Came From Abductor Who Said She Died, Investigators Believe

Investigation Points Toward Abductor’s Authorship

Nancy Guthrie ransom notes likely came - Law enforcement officials have concluded that the two ransom notes sent to Nancy Guthrie’s family shortly after her disappearance were likely authored by the individual or group responsible for abducting her, according to sources involved in the case. The notes, which were received days following her vanishing, contained specific details about her home and her fate, leading investigators to suspect a direct connection between the sender and the abductor. A key piece of evidence is the shared IP address used to transmit both notes, which suggests a single source rather than multiple parties involved in the crime.

Among the critical findings, authorities noted that the abductor or abductors who claimed responsibility for Nancy Guthrie’s disappearance used a consistent tone and phrasing in both messages. The first note, sent on February 2, one day after the 84-year-old woman was reported missing from her Tucson, Arizona, residence, demanded a substantial sum in bitcoin for her release. The second note, delivered a few days later on February 6, revealed that Nancy had died, though it also implied the abductors had not intended for her to perish. This contradiction has sparked debate about the motives behind the communication and the credibility of the abductor’s claims.

Specific Details in the First Note

The initial ransom message included highly precise information about Nancy Guthrie’s home, which has been cited as a significant clue in the investigation. Investigators reported that the note described the location of an Apple Watch with a white band on the floor of her bedroom and mentioned that her back porch light was broken. These details, which were verified by the family and corroborated by witnesses, have bolstered the belief that the sender had direct access to the victim’s environment. The note was addressed to Savannah Guthrie, Nancy’s daughter and co-host of the "Today" show, according to multiple sources familiar with the communication.

Authorities emphasized that the level of specificity in the first note made it unlikely to have been fabricated by someone without intimate knowledge of the home. For example, the mention of the Apple Watch’s white band and the broken porch light indicates the sender had spent time observing the house, possibly during the abduction. This has led investigators to consider the possibility that the abductor used the ransom notes as a way to confirm the family’s belief in their story while also extracting financial support.

Family’s Response and Public Appeal

Following the second note, which stated Nancy Guthrie had died, the family took steps to publicly address the situation. Savannah Guthrie and her siblings appeared in an Instagram video released after the note was sent, offering a heartfelt appeal to the kidnappers. In the clip, Savannah said:

“We received your message and we understand. We beg you now to return our mother to us so that we can celebrate with her. This is the only way we will have peace. ... This is very valuable to us, and we will pay.”

The video served as both a statement of the family’s resolve and a means to assert the authenticity of the notes.

Savannah Guthrie, in an interview with NBC in March, reiterated the family’s confidence in the notes’ legitimacy. She explained:

“There are a lot of different notes, I think, that came, and I think most of them — it's my understanding — are not real, and I didn’t see them. But I believe the two notes that we received, that we responded to, I tend to believe those are real.”

Her comments highlight the family’s skepticism toward other ransom messages that may have circulated during the crisis, while affirming their belief that the two notes provided a coherent and credible account of the events.

The ransom notes also served as a strategic tool for the abductor. The first message, which demanded millions in cryptocurrency, aligned with the typical tactics of modern abductions, where digital payments are often preferred for their anonymity. However, the second note shifted the narrative to a more emotional plea, emphasizing the abductor’s claim that Nancy’s death was unintentional. This change in tone could be an attempt to manipulate the family’s response or to add urgency to their situation.

Ongoing Investigation and Search Efforts

A joint task force composed of FBI agents and Pima County detectives continues to delve into the case, seeking answers about Nancy Guthrie’s whereabouts and the identities of those responsible. The team has expanded its search to include potential witnesses, surveillance footage, and digital footprints linked to the ransom notes. Investigators are also examining the timeline of events to determine whether the abductor had the opportunity to send the notes after the initial abduction, as well as to assess the credibility of the account provided.

While the ransom notes have been a central focus of the investigation, authorities acknowledge that more clues are needed to fully understand the circumstances. The shared IP address suggests a coordinated effort, but it does not confirm the abductor’s identity. In addition to analyzing the notes, the task force is reviewing Nancy’s daily routine, potential suspects, and any patterns in her behavior that might have preceded the disappearance.

Experts in criminal behavior have noted that ransom notes can be both a tool for communication and a psychological tactic to reduce the victim’s stress. By revealing Nancy’s death in the second note, the abductor may have aimed to shift the family’s focus from demanding her release to securing compensation for the loss. This strategy could also serve to create a sense of urgency and reduce the likelihood of further negotiations.

As the investigation progresses, the family remains a key source of information. Their willingness to respond to the notes and their public statements have provided valuable insight into the abductor’s intentions. Meanwhile, the community in Tucson has rallied behind the search, with local media and residents offering support and sharing any potential leads. The case continues to capture national attention, underscoring the complexity of modern abductions and the challenges of uncovering the truth in the digital age.

In summary, the two ransom notes sent to Nancy Guthrie’s family have been a pivotal element in the investigation. Their detailed content and shared origin point to a single perpetrator or group, while the emotional language in the second note adds a layer of intrigue to the case. As authorities work to piece together the events, the family’s steadfast belief in the notes’ authenticity offers a critical perspective that could guide the search for answers.