Six months after 84-year-old Nancy Guthrie vanished from her Tucson-area home, the Pima County Sheriff's Department has taken an unusual step: releasing two ransom notes to the public, betting that someone will recognize the writer's voice. The move follows a playbook that helped crack one of the most infamous cases in FBI history.
Guthrie, the mother of Today show host Savannah Guthrie, was last seen alive at her home on January 31. Within days, two ransom notes surfaced. No arrests have been made. No body has been recovered. And investigators, still grinding through complex digital and DNA evidence, are now asking ordinary citizens to do what forensic tools have not yet accomplished: identify a kidnapper by the way he writes.
The decision to publish the notes mirrors the FBI's 1995 decision to release Ted Kaczynski's 35,000-word manifesto. That gamble paid off when Kaczynski's brother recognized the writing and alerted authorities, ending a bombing campaign that had stretched across nearly two decades. Fox News reported that experts see the same logic at work here: distinctive phrasing, unusual word choices, and idiosyncratic sentence structures can function like a linguistic fingerprint, one that a friend, coworker, or family member might spot instantly.
The Sheriff's Department made the connection explicit in its public appeal, pointing to what it called "distinctive linguistic characteristics" in the notes.
"We believe these distinctive linguistic characteristics may be recognizable to someone who knows or has interacted with the notes' writer."
Investigators also signaled that they understand allegiances shift. In a second statement, the department added a pointed message aimed at anyone in the kidnapper's circle.
"We recognize relationships and loyalties change over time as do people and their perspectives. It is not too late to come forward."
The first ransom note was sent on February 2 to CBS Tucson affiliate KOLD-TV. It was addressed to Savannah Guthrie, claimed her mother was alive and safe, and demanded $4 million in cryptocurrency. The note promised Nancy Guthrie would be released within 12 hours of payment and threatened to kill her if the ransom was not paid, AP News reported.
Four days later, on February 6, a second note arrived. This one went directly to the Guthrie family. Its tone was radically different. The author claimed Nancy Guthrie had died shortly after being taken, blaming pre-existing health conditions. The note stated bluntly: "She is buried in nature now." It ended with an apology, Breitbart reported.
The second note's author wrote:
"We did not fully grasp the seriousness of her physical condition. We never intended to hurt her, that was not our intention. She perished shortly after she was taken."
The shift from a cold financial demand to something closer to a confession has drawn the attention of forensic analysts. Forensic psychologist Gary Brucato, who analyzed both notes, told the New York Post that he believes the two notes were written by two different people with distinct psychological profiles and distinct motives.
"These two ransom notes... do suggest to me two different people who are perhaps experiencing some kind of rupture in terms of their attitude about what happened."
Brucato's theory goes further. He suspects the masked figure captured on Guthrie's porch by security cameras was neither author. That person, Brucato said, was likely a "goon" used to create the impression of an outside agent. In his assessment, the first note's author was calculating and money-driven. The second note's author was more emotionally involved and may have had a personal connection to the Guthrie family.
Brucato highlighted a critical tension between the two notes. The first demanded $4 million. The second, by announcing Nancy Guthrie's death, eliminated any leverage the first author had to collect that money.
"The first one is demanding money and the second one is undoing the ability of the first person to get money, which suggests to me that the first person would've been kinda mad that the second person wrote the note."
If Brucato's analysis is correct, the kidnapping involved at least three individuals: the porch figure, the calculated ransom author, and the emotionally conflicted second writer. That kind of internal fracture is exactly what investigators often exploit to break a case open. When co-conspirators disagree about what happened and what to do next, someone eventually talks.
The Guthrie family responded to the first ransom note. Savannah Guthrie's reply, now part of the public record, was direct and personal.
"We received your message and we understand. We beg you now to return our mother to us. This is very valuable to us, and we will pay."
The family's willingness to pay was rendered moot by the second note's claim that Nancy Guthrie had already died. Just The News reported that authorities released the notes publicly in hopes the writing patterns would trigger recognition from someone in the public.
The investigation has also uncovered doorbell camera footage suggesting the kidnapping was planned well in advance. The footage shows an unidentified male who appears to have conducted surveillance on the Guthrie home on two separate days before January 31. That detail points to premeditation, not an impulsive crime.
Authorities have not publicly identified the individual in the footage. They have not confirmed whether the surveillance figure matches the masked person later seen on the porch.
Two men previously detained during the investigation have filed a $3 million legal claim against the Pima County Sheriff's Department. The nature of their detention and the basis for their claim have not been fully detailed in public statements. Neither man has been charged in connection with Guthrie's disappearance.
The case remains open. The Pima County Sheriff has cited complex digital and DNA evidence analysis as factors in the ongoing timeline. No arrests have been announced. Nancy Guthrie's remains have not been recovered.
Investigators will need to determine whether the doorbell footage can be matched to a known individual, whether the linguistic analysis leads to identification of either note's author, and whether the internal conflict Brucato identified among the conspirators produces a cooperating witness.
The Unabomber case proved that publishing a suspect's own words can accomplish what years of traditional investigation cannot. A brother read a manifesto and recognized his sibling's voice. The FBI arrested Kaczynski within months.
The Pima County Sheriff's Department is placing the same bet now, on a smaller scale but with the same underlying logic. Somewhere, someone knows the person who writes the way these notes read. The question is whether that person will pick up the phone.
When law enforcement runs out of leads, it turns to the public. When it turns to the public, it is admitting something uncomfortable: six months in, the people closest to this crime still hold the answers that badges and labs have not yet produced.
