Six months after 84-year-old Nancy Guthrie vanished from her Tucson home, the Pima County Sheriff's Office released the full text of two alleged ransom notes for the first time, but the FBI has since determined both notes are fake.
The sheriff's office published images of the notes on X on July 31, asking the public to study the language and help identify the writer. The first note, emailed to local news station KOLD-13 on February 2, just two days after Guthrie was last seen, addressed her daughter, NBC "Today" show co-host Savannah Guthrie, by name and demanded $4 million in bitcoin. The second, sent four days later, abandoned the ransom demand entirely and claimed Nancy had died.
Together, the documents paint a picture of someone who shifted from cold financial extortion to an expression of remorse in less than a week. Investigators hope the writer's distinctive word choices will jog a memory, a friend, a coworker, a neighbor, and finally crack a case that has produced no arrests and left a family without answers for half a year.
The first note, as the New York Post reported, opened with a blunt declaration:
"Hello Savannah, We have your mother Nancy. She is safe but scared. She will be held for ransom and once payment is received she will be released unharmed."
The sender set a two-tier deadline. Pay $4 million in bitcoin by 5 p.m. on "Thursday the 5th," or the price jumps to $6 million, due by 5 p.m. on "Monday the 9th." Miss both, the note warned, and Nancy would be killed. A maximum holding period of seven days was stated. The writer promised release within 12 hours of payment to "a safe drop off location back in Tucson."
One line was redacted by authorities before the public release. But the note included a detail that appeared designed to prove the sender had been inside Nancy's home: "She had a white smart watch on the floor of the foot of her bed and the white flood light in backyard was destroyed."
The tone was controlling and absolute. "Your mother is aware of this and her life is in your hands," the note read. "You will not be able to contact me from here on out, there will be no negotiation. Do not play games, law enforcement will not be able to help you." The sender's name, email address, and date of birth were all redacted from the version released to the public.
On February 6, KOLD-13 received a second email. The financial demand was gone. In its place was a short, grim message addressed to the "Guthrie Family":
"We did not fully grasp the seriousness of her physical condition. We never intended to hurt her, that was not our intention. She perished shortly after she was taken. We believe it was heart related. She is buried in nature now. Nothing you could have done could have changed the outcome. We want your family to know this and hope you all can find peace. We are truly sorry."
The shift from a calculated ransom scheme to a claim of accidental death, all within four days, is one of the case's most troubling details. No law enforcement agency has independently confirmed Nancy Guthrie's death. As AP News reported, investigators released the notes specifically because they believe the writer's "distinctive linguistic characteristics may be recognizable to someone who knows or has interacted with the notes' writer."
The Pima County Sheriff's Office said the notes reveal "distinctive patterns of word choice, syntax, and phraseology that reflect the writer's unique linguistic style." That phrasing suggests investigators are treating the documents as forensic evidence, linguistic fingerprints that might lead where DNA and video have not.
Alongside the notes, the sheriff's office highlighted surveillance camera footage from Nancy's home showing an unidentified male "cloaked in all black hovering around Nancy's front door." The footage may come from two separate days, authorities said. The sheriff's office stated the suspect "took steps to prepare for the event on the night of January 31 to February 1", the same night Nancy was last seen alive by Savannah Guthrie and her son-in-law.
Nancy Guthrie, 84, was dropped off at her home in the Catalina Foothills area of southern Arizona on the evening of January 31. She was in frail health with limited mobility. What happened between that evening and the arrival of the first ransom note on February 2 remains the central question of the investigation.
The sheriff's office also published a list of behavioral changes the public should watch for, shifts in a person's conduct that might signal involvement. The appeal was direct: "A friend, family member, coworker, classmate, or acquaintance may recognize these patterns of expression and possess information that could help identify the individual responsible."
The release of the notes came at the six-month mark, but a separate and significant development had already reshaped the investigation. Just The News reported that the FBI determined all three notes connected to the case, the two ransom emails and a third from someone claiming to know the kidnappers' identities, are fake.
The finding did not come from guesswork. As Newsmax reported, the FBI deposited a small amount of cryptocurrency as instructed in the first ransom note. The money was never claimed. That failure to collect, combined with other forensic analysis, led investigators to conclude the notes were not genuine. An FBI official, speaking anonymously to Reuters, said flatly: "None of the ransom notes are believed to be genuine."
That conclusion upends the initial theory that Nancy Guthrie was taken for financial gain. If the person who wrote the notes did not actually hold Nancy, then the case may involve someone who exploited a family's agony for reasons investigators have not yet disclosed, or it may involve a writer who had some connection to the crime but fabricated the ransom angle. Either way, the FBI's determination that the notes are fake leaves the motive for Nancy's disappearance wide open.
At the six-month mark, Pima County Sheriff Chris Nanos confirmed the investigation remains active. A joint FBI, Sheriff's Department task force has spent months analyzing DNA, digital, and video evidence while working through thousands of tips. Breitbart reported that Nanos pushed back against FBI Director Kash Patel's claim that the sheriff's department delayed notifying the FBI, asserting the FBI was present from day one.
"Every day we're closer" to identifying a suspect or suspects, Nanos said. His official statement added: "It is never too late to do the right thing. Anyone with information is urged to come forward and help bring this case to a resolution."
The FBI is offering a $1 million reward for information leading to Nancy's recovery. Tips can be submitted by calling 1-800-CALL-FBI or 88-CRIME, a local Tucson-area tip line. Investigators said they "continue to pursue every available technological and investigative lead," but acknowledged that "community members remain a vital resource."
Days before the notes were released, Savannah Guthrie posted a video on Instagram addressing whoever took her mother. Her words carried the weight of someone who has spent months waiting without answers.
"The world can be a cruel and unforgiving place, and I know that you have tried to do things the right way. So I am asking you, begging you, to do the right thing now."
Savannah has publicly acknowledged the possibility that her mother may already be gone. In an earlier social media video, she said the family would pay the ransom, a statement made before the FBI concluded the notes were fabricated.
The gap between the family's willingness to pay and the FBI's finding that no one ever collected the cryptocurrency is one of the case's most unsettling facts. Someone wrote those notes. Someone knew details about the inside of Nancy's home, the smart watch on the floor, the destroyed flood light. And someone chose to send them not to the family or to law enforcement, but to a local television station.
Whether that person is the same individual captured on surveillance footage outside Nancy's front door remains unknown. Whether Nancy Guthrie is alive or dead remains unconfirmed by any authority. And whether the linguistic patterns in the notes will lead someone to recognize the writer, as investigators clearly hope, is the open question the Pima County Sheriff's Office put before the public on the day the case turned six months old.
An 84-year-old woman vanished from her own home, and half a year later, the people responsible for finding her are asking strangers to read two emails and search their memories. That is where this case stands. It should not still be there.
