New demand letter in Nancy Guthrie kidnapping claims to name two suspects and reference video evidence

By Alex Tanzer, 
updated on June 28, 2026

Nearly five months after 84-year-old Nancy Guthrie vanished from her Tucson home, an anonymous sender has emailed a new demand letter to TMZ claiming to identify two individuals responsible for her kidnapping, and referencing a hidden phone that allegedly contains video of one of them with Nancy on what the letter describes as "probably her last" day.

The letter, reported by Hello Magazine on June 27, was forwarded to the FBI. It came from the same email address previously used to send ransom notes to media outlets. No arrests have been made. Nancy Guthrie remains missing.

If the claims in the letter prove credible, they would mark the most significant lead yet in a case that has gripped the country, the abduction of an elderly woman from her own front door while her family slept nearby. If they prove false, they join a growing pile of communications that have consumed investigative resources and tormented a family already begging for answers.

What the new letter claims

The demand letter, emailed to TMZ and reported on June 26, references "a phone stashed in a secure location." It claims the phone holds a video of "the main guy" with Nancy, along with "pictures of both [kidnappers] involved, names and addresses and age."

The letter's anonymous author claims to identify two people responsible for the kidnapping. The FBI and the Pima County Sheriff's Department were both contacted for comment by Hello Magazine. Neither agency's response was included in the reporting.

That silence is notable. Throughout this case, law enforcement has been cautious about which communications it treats as genuine. Fox News reported that the FBI's Phoenix field office confirmed at least one earlier ransom note as legitimate, citing deadline-specific details and a request for bitcoin payment that matched crime-scene facts only the captors would know.

A timeline of dread

Nancy Guthrie, the mother of Today show host Savannah Guthrie, spent the evening of January 31 with her daughter Annie and Annie's husband, Tommaso Cioni. She was home in Tucson. What happened next unfolded in minutes.

At 1:47 a.m. on February 1, her doorbell camera was disconnected. The FBI later recovered footage showing an armed, masked person tampering with the camera, wearing a black 25-liter "Ozark Trail Hiker Pack" backpack, as AP News documented in its day-by-day timeline of the case.

By 2:28 a.m., Nancy's pacemaker app had disconnected from her phone, meaning she had been taken far enough from the device for the connection to sever. An 84-year-old woman with a heart condition, removed from her home in the dark.

Her disappearance was discovered the next morning when she failed to attend her weekly church service. Police were called shortly after. DNA testing later confirmed that blood found on her front porch belonged to Nancy, and signs of forced entry were found at the home.

The ransom notes: credible, contradictory, and cruel

Within days of Nancy's disappearance, ransom notes began arriving at media outlets and the Guthrie family. The first, received by TMZ, demanded $4 million in bitcoin. It correctly described what Nancy was wearing the night she vanished and referenced a damaged floodlight on her property, details that gave investigators reason to take it seriously.

Authorities sorted the flood of communications into tiers of credibility. The New York Post reported that investigators categorized the ransom messages into three groups, "the good, the bad, and the ugly", based on the specificity and reliability of their content.

Then came the letter that shifted the entire investigation. Approximately five days after Nancy's disappearance, a message sent from the same IP address as earlier ransom letters appeared to apologize for her accidental death. The writer claimed Nancy had been killed and demanded $4 million to return her body. That communication moved the probe from a kidnapping case toward a potential homicide investigation.

A second ransom note, emailed to a Tucson TV station, went further. It claimed Nancy "perished shortly after she was taken" and "is buried in nature now." Authorities have not confirmed or denied the authenticity of either note, and have not publicly identified who sent them.

Former FBI officials have urged caution. Rob Chadwick, a former FBI supervisory agent, told Newsmax early in the case that the ransom demands were inconsistent with a typical kidnapping-for-ransom scenario.

"This entire ransom demand, if that's what it is, is just not consistent with what we typically see as a true kidnapping for ransom."

Retired FBI Special Agent Michael Harrigan described the operation as "an all-hands-on-deck situation," with investigators returning to the home multiple times to collect evidence and conducting hundreds of interviews.

A family's public agony

Savannah Guthrie and her sister took to Instagram with a video directed at whoever holds their mother. Their words were raw and direct, as Savannah stated on the Today show that she believed two of the ransom notes the family received and responded to were genuine.

"We received your message, and we understand. We beg you now to return our mother to us so that we can celebrate with her. This is the only way we will have peace. This is very valuable to us, and we will pay."

That plea, a mother's daughters offering to pay ransom on camera, reflected a family operating in coordination with law enforcement, according to former FBI officials. But it also captured something harder to quantify: the desperation of people who have no idea whether their mother is alive or dead, and who have been subjected to a stream of anonymous communications that alternate between hope and horror.

Savannah Guthrie later made an emotional on-air appeal during the Today show. "Somebody knows something," she said. "We love our mom, and we'll never stop looking for her, never." The FBI doubled its reward for information to $100,000 on February 12, a signal of how seriously the bureau was treating the case even in its early days.

The investigation has extended beyond Arizona. An anonymous tip sent a Mexican search team hunting for Nancy Guthrie's remains near the Nogales border, adding an international dimension to an already sprawling case.

What this new letter means, and what it doesn't

The new demand letter's claims are specific: two kidnappers, a hidden phone, video and photographic evidence, names and addresses. If authentic, it could represent a break in a case that has produced more questions than answers for nearly five months.

But specificity alone does not equal credibility. Earlier notes also contained precise details, Nancy's clothing, the damaged floodlight, and investigators still have not made an arrest. The letter arrived from the same email address as prior ransom communications, which could mean the sender has genuine knowledge of the crime or simply has access to the same account used by earlier correspondents.

The FBI has not publicly confirmed whether it considers the new letter credible. Hello Magazine noted it contacted both the FBI and the Pima County Sheriff's Department for comment and received no response. That wall of silence may itself be telling, either the bureau is taking the claims seriously enough not to discuss them, or the letter has already been assessed and filed alongside the "bad" and "ugly" tiers of prior communications.

Former law enforcement officials have suggested that investigators may be closing in on the masked suspect seen in the recovered doorbell camera footage. Whether this new letter accelerates or complicates that work remains to be seen.

The questions that remain

Has the video referenced in the letter been verified by anyone? Where is the "secure location" where the phone is allegedly stored? Is the anonymous sender a witness, an accomplice, or an opportunist? Is Nancy Guthrie alive?

None of these questions have public answers. What the public does know is this: an 84-year-old woman was taken from her home by force in the middle of the night. Blood was found on her porch. Her pacemaker app went dark forty-one minutes after her doorbell camera was disabled. Ransom notes arrived. Some were credible. One apologized for her death. And now, five months later, another letter has surfaced claiming to hold the key to the whole thing.

The Guthrie family has done everything asked of them, gone public, pleaded on camera, offered to pay. The FBI has deployed significant resources. And still, Nancy Guthrie is not home.

Five months is a long time for an 84-year-old woman with a heart condition to be missing. It's an even longer time for a family to live between hope and grief while anonymous letters keep arriving. Someone does know something. The question is whether anyone with real authority, and real evidence, will finally act on it.

About Alex Tanzer

Real Talk. Daily.

No spin. No fluff. Just the hard truth. served straight. Every morning, we cut through the noise and deliver what really matters to hardworking Americans. No agendas. No media games. Just real talk you can trust.