A ransom note sent to TMZ on Feb. 6 opened with an apology for the accidental death of 84-year-old Nancy Guthrie, and offered to return her body for a price, according to a New York Post report citing an Air Mail investigation. That single communication forced investigators to pivot from a kidnapping case to a potential homicide, sources close to the case told Air Mail.
No arrests have been made. No new leads have surfaced. And the family of the Tucson, Arizona, woman, including her daughter, NBC "Today" host Savannah Guthrie, has been left to sort through a flood of ransom demands, hoaxes, and dead ends that began almost immediately after Nancy vanished from her home on Feb. 1.
The Feb. 6 note landed at TMZ from the same IP address used to send earlier blackmail letters, sources said. Unlike the first credible ransom demand four days earlier, this message did not describe Nancy Guthrie as alive. It apologized for her death and proposed a transaction for the return of her remains. No specific dollar figure appeared in the note.
After Nancy Guthrie disappeared, ransom notes flooded her family and media outlets. Investigators sorted them into three categories they labeled "the good, the bad, and the ugly." Notes containing specific information about Guthrie, details that might only be known to someone involved, were classified as "good." The Feb. 6 note, with its reference to her accidental death, fell into the "bad" category.
The first note investigators took seriously arrived Feb. 2. It demanded $4 million in bitcoin, described Guthrie as "safe but scared," and spelled out terms for an exchange. That note convinced investigators they were dealing with real kidnappers.
The Pima County Sheriff's Office confirmed it was aware of reports about ransom notes and said it was coordinating with the FBI. "Anything that comes in, goes directly to our detectives who are coordinating with the FBI," the sheriff's office stated.
Investigators searched Nancy Guthrie's home but found no footprints, tire tracks, or DNA evidence pointing to suspects.
The FBI recovered doorbell camera footage showing a masked individual with a backpack and what appeared to be a holstered weapon tampering with the camera at 1:47 a.m. on Feb. 1, National Review reported. The figure appeared to disable the camera before Nancy Guthrie's disappearance was discovered.
Bloodstain pattern analysis inside the home suggested she suffered a bloody nose. Retired bloodstain analyst Paulette Sutton described the evidence as "a drip trail, which means it's a continuous source of blood dripping from an object or from a person." That finding pointed to physical harm during the abduction, and raised early questions about whether Nancy Guthrie survived the encounter.
As we previously reported, a retired FBI profiler told Fox News that the blood evidence suggested she may have fought back and was alive when taken from the home.
On Feb. 7, one day after the note apologizing for Nancy's death arrived at TMZ, Savannah Guthrie and her siblings posted a 20-second video to Instagram. The message was directed at whoever took their mother.
"Received your message and we understand."
Savannah Guthrie begged the abductor to "return our mother to us," called her return "very valuable to us," and said plainly: "we will pay."
It remains unclear whether the family knew at that point about the Feb. 6 note's claim that Nancy had died. The Instagram video's tone, focused on return, not recovery, suggests they may have been responding to the earlier, more hopeful communication.
In a later interview on "Today," Savannah Guthrie acknowledged that most of the ransom notes her family received were fakes, many sent by what investigators described as opportunists. But she drew a line around two notes she believed were genuine.
"I believe the two notes that we received that we responded to, I tend to believe those are real."
That distinction matters. It means the family, advised by investigators, concluded early on that the vast majority of communications were noise, but that at least two carried enough specific detail to warrant a response and, presumably, a willingness to pay.
Savannah Guthrie's emotional public pleas have continued in the months since, including a Mother's Day post as the search neared 100 days.
The ransom notes did not stop at two. Fox News reported that notes were received by TMZ and local Tucson news stations KOLD and KGUN, containing sensitive crime scene details, including references to an Apple Watch and a damaged floodlight observed outside the Guthrie home. The FBI's Phoenix field office said it believed at least one note was legitimate, based on deadline-specific facts and the request for funds.
FBI Phoenix Division Special Agent in Charge Heath Yonke stated: "We are aware of a ransom letter that was sent to the local media and then to national outlets. As with every lead, we are taking it seriously."
Demands escalated from $4 million to $6 million in bitcoin, with deadlines that passed without payment. One sender was arrested for fraud, according to National Review, a sign that the case attracted not only genuine criminals but grifters looking to exploit a family's agony.
A separate anonymous individual sent TMZ four notes claiming to know Nancy Guthrie's whereabouts, alleging she was in Mexico, the Washington Examiner reported. TMZ founder Harvey Levin publicly urged that person to provide verifiable information. A previous note from the same source demanded $50,000 in bitcoin in exchange for the kidnapper's identity. All messages traced to the same bitcoin address.
The Mexico angle gained enough traction that an anonymous tip sent a Mexican search team hunting for remains near the Nogales border crossing.
One ransom note contained travel-time references that TMZ's Harvey Levin used to narrow Nancy Guthrie's possible location. Newsmax reported that based on those clues, investigators believed she could be somewhere on the West Coast or in northern Mexico, a radius spanning Nevada, Utah, California, New Mexico, or south of the border.
"In the letter it says they would return her back to Tucson. They also give a time frame of how long it would take after they receive the money to return her to Tucson," Levin said. He added that the email appeared impossible to trace, intensifying pressure on the FBI.
A retired Arizona lawman has publicly theorized that Guthrie may have been smuggled into Mexico after her kidnapping, a scenario consistent with the geographic clues in the ransom communications.
Nancy Guthrie's dependence on daily medication has added urgency. If she is alive, her health is at serious risk with every passing day.
The Nancy Guthrie disappearance is now months old. The FBI has weighed new technology as the case passed its four-month mark. No suspect has been publicly identified. No body has been recovered. The doorbell camera footage shows a figure but not a face. The blood trail tells a grim story but not a complete one.
The Feb. 6 ransom note, with its casual apology for killing an 84-year-old woman and its offer to sell back her remains, stands as the most chilling communication in a case full of them. Whether it came from the actual abductor or from someone with enough inside knowledge to fake it remains an open question.
Savannah Guthrie believes two of the notes are real. Investigators shifted to a homicide footing after the Feb. 6 message. And the family has said publicly, on camera, that they are willing to pay.
What they cannot buy is answers. An elderly woman was taken from her home in the middle of the night by a masked figure caught on camera, and the combined resources of the FBI, the Pima County Sheriff's Office, and a national media spotlight have yet to produce a single arrest.
If law enforcement cannot solve a case this visible, with this much public attention and this many leads pouring in, it raises a hard question about what happens to the families whose missing loved ones never make the front page at all.
