A ransom note demanding millions in Bitcoin for the return of 84-year-old Nancy Guthrie — mother of Today Show host Savannah Guthrie — contains a second payment deadline described as "far more consequential" than the first, which has already passed. The family still has no way to contact whoever sent the letter, no proof their mother is alive, and no confirmed suspect in custody connected to her disappearance.
Nancy vanished from her $1 million Tucson, Arizona home in the early morning hours of Sunday after a quiet Saturday evening dinner with her eldest daughter, Annie, and son-in-law Tommaso Cioni. She was dropped off by a family member at approximately 9:50 PM, entered through her garage door, and was never seen again.
By Thursday, a second deadline loomed, an imposter had already been arrested for sending a fake ransom note, and the Guthrie family was reduced to recording video pleas begging unknown captors to simply prove their mother was still breathing.
The sequence of events that night tells its own story. Nancy traveled via Uber to Annie's home — about 30 minutes away — at approximately 5:30 PM Saturday. After dinner, a family member drove her home. She entered through her garage door around 9:50 PM. Then the digital trail begins to fracture.
At 1:47 AM Sunday, Nancy's doorbell camera disconnected. At 2:12 AM, the camera's sensors detected a person. At 2:28 AM, Nancy's pacemaker app severed its Bluetooth connection to her phone. When investigators arrived, the doorbell camera was missing from the front porch entirely. Blood droplets were found steps from the front door, according to the Daily Mail.
Nancy was reported missing after she failed to show up for church services on Sunday morning. DNA testing on the blood was rushed through. Pima County Sheriff Chris Nanos confirmed the results at a Thursday news conference, "It, it, it came back to Nancy. That's what we know."
More items have been submitted for testing. Results are pending.
The ransom letter — sent to media outlets including TMZ and local TV stations — demanded a multi-million-dollar Bitcoin payment and claimed Nancy was alive. It included a cryptocurrency address. What it did not include was any way for the family to respond.
TMZ producer Harvey Levin, who reviewed the letter, told CNN:
"The letter says: 'You will have no way of contacting me, this is the only contact.'"
Levin described the letter as deliberate, structured, and impossible to trace back to its author. Speaking to Hannity on Fox News Thursday night, he characterized it plainly:
"This is not a letter that was thrown together in a couple of minutes. It's a very specific, well-organized, layered letter that really lays things out."
He went further:
"This is not AI. It's not a crazy person who's writing this."
It's worth noting these are Levin's personal assessments, not the conclusions of law enforcement or forensic analysts. But the picture he paints is of someone methodical — someone who wanted the family cornered with no channel of communication while a clock runs down.
Levin also told Hannity he believes the note's author is local:
"There are real reasons, based on what's written there, that I believe that this person is in the radius of the Tucson area."
He cited "something specific" in the letter but declined to elaborate. As he put it:
"I think at least what the authorities have is they have a radius, and that's something."
The first payment deadline passed on Thursday without a public incident. But Levin disclosed that the letter contains a secondary deadline he described as "far more consequential" — without offering any specifics about its date, conditions, or what it threatens. That ambiguity is its own form of cruelty. A family with no way to communicate, no proof of life, and a ticking clock they can't read.
On Wednesday night, Savannah Guthrie and her two siblings released a video addressing whoever took their mother. Savannah's words were measured but desperate:
"We live in a world where voices and images are easily manipulated. We need to know, without a doubt, that she is alive and that you have her. We want to hear from you and we are ready to listen. Please, reach out to us."
She captioned the video simply: "Bring her home."
On Thursday, after the first deadline passed, her brother Camron Guthrie recorded his own plea:
"Whoever is out there holding our mother — we want to hear from you."
He noted the silence on the other end:
"We haven't heard anything directly."
"We need you to reach out and we need a way to communicate with you so we can move forward."
"But first, we have to know that you have our mom."
That last line lands like a weight. The family doesn't even know if the person who wrote the note actually has Nancy. They are negotiating with a ghost.
The FBI announced Thursday it arrested an imposter charged with allegedly sending a fake ransom note — a separate communication from the one Levin described. No identifying details about the imposter were released. The arrest underscores the grim reality that high-profile cases attract opportunists willing to exploit a family's anguish for a potential payday.
FBI officials stated they have not verified that the primary ransom note is legitimate, but said it is being taken "very seriously" as an investigative lead. FBI Special Agent Heith Janke said authorities have not ruled anyone out and are analyzing information from all digital sources, including banks, social media companies, phone companies, and any other organization where a digital footprint could have been captured.
Sheriff Nanos struck a similar tone of comprehensive suspicion:
"We're actively looking at everyone we come across in this case, everybody."
"We would be irresponsible if we didn't talk to everybody — the Uber driver, the gardener, the pool person, whoever. Especially — it's so cliche — but everybody's still a suspect in our eyes. That's just how we look at things and think as cops."
He confirmed the family has been fully cooperative:
"And the family's been very cooperative. They've done everything we've asked of them. And we want that relationship to continue."
The gaps in this case are as troubling as the known facts. No suspects have been identified. The authenticity of the ransom note remains unverified. The specific amount demanded has been described only as "millions." The secondary deadline — the one Levin calls "far more consequential" — carries no publicly known terms. The identity of whoever dropped the doorbell camera's signal, triggered its sensors 25 minutes later, and somehow severed Nancy's pacemaker connection remains a cipher.
An 84-year-old woman with a pacemaker was taken from her home in the dead of night. Blood was found at the scene. The only communication demanding her return was designed from the start to be a one-way channel — a ransom with no return address.
The family can't negotiate. They can't verify. They can only beg into the silence and wait for a deadline they don't fully understand. Somewhere in the radius of Tucson, someone is counting down. The Guthrie family is counting too — with nothing to count on.
