Six months after 84-year-old Nancy Guthrie vanished from her Tucson home, investigators are betting that the words of her alleged kidnapper will be his undoing. The Pima County Sheriff's Department and the FBI Phoenix Field Office have publicly released two ransom notes sent in the days after Guthrie's disappearance, asking anyone who recognizes the writer's voice on the page to come forward.
The strategy has a famous precedent. As Fox News reported, experts compare the move to the Unabomber case, in which Ted Kaczynski was ultimately identified after his brother recognized the language and ideas in a published manifesto. Investigators are hoping the same kind of recognition breaks this case open.
Nancy Guthrie, the mother of NBC "Today" show host Savannah Guthrie, was last seen at her Tucson residence on the evening of January 31, 2026, after her son-in-law dropped her off at approximately 9:50 p.m. By the early morning hours of February 1, FBI-recovered doorbell camera footage showed a masked individual carrying a backpack and what appeared to be a holstered weapon attempting to disable the camera at 1:47 a.m.
The first ransom note arrived at CBS Tucson affiliate KOLD-TV on February 2. It demanded $4 million in cryptocurrency and claimed Guthrie was "safe but scared," Breitbart reported. The note threatened to kill her if the ransom went unpaid.
A second note followed on February 6. Its tone shifted sharply. The writer claimed Guthrie had died shortly after being taken and denied intent to harm her.
"We never intended to hurt her, that was not our intention. She perished shortly after she was taken. We believe it was heart related. She is buried in nature now."
That language came from the second note, as released by the Washington Examiner. The note also told the family that "nothing you could have done could have changed the outcome" and closed with the words, "We are truly sorry."
Ransom demands escalated across the two notes. The first set a February 5 deadline for $4 million in Bitcoin. A separate demand pushed the figure to $6 million with a February 9 deadline. Both deadlines passed without payment, National Review detailed in its timeline of the case. The notes were sent to local Tucson TV stations KOLD and KGUN.
The Sheriff's Department laid out its rationale plainly. Investigators believe the notes contain identifiable quirks in word choice, sentence structure, and phrasing that could ring a bell with someone in the writer's life.
"These communications reveal distinctive patterns of word choice, syntax, and phraseology that reflect the writer's unique linguistic style."
That statement from the Pima County Sheriff's Department accompanied the public release. The department also urged people not to discount the possibility that someone they know could be involved, noting that "relationships and loyalties change over time as do people and their perspectives. It is not too late to come forward."
The Unabomber parallel is instructive. Kaczynski eluded the FBI for nearly two decades. His 35,000-word manifesto, published in 1995 at the bureau's urging, led his brother David to recognize the writing and contact authorities. The arrest followed in 1996. Experts cited by Fox News see the Guthrie note release as drawing directly from that playbook: put the words in front of the public and let familiarity do what forensic databases cannot.
The doorbell camera footage recovered by the FBI does more than capture the moment a masked figure approached the home. AP News reported that the footage suggests an unidentified male may have conducted surveillance on two separate days before the kidnapping, indicating the crime was planned rather than opportunistic.
Breitbart's reporting echoed that assessment, noting the footage pointed to premeditation. The masked individual seen at 1:47 a.m. on February 1 carried what appeared to be a holstered weapon and wore a backpack, consistent with someone arriving prepared.
Retired bloodstain pattern analyst Paulette Sutton, commenting on physical evidence at the scene, described what investigators found as "a drip trail, which means it's a continuous source of blood dripping from an object or from a person." That detail, reported by National Review, deepened concerns about what happened inside the Guthrie home that night.
The investigation has already produced at least one arrest, though not of a primary suspect. Authorities detained a man for sending a fraudulent ransom demand to the Guthrie family, separate from the two notes now released to the public. National Review reported that this individual attempted to exploit the family's crisis with a copycat demand.
Two other men who were previously detained in connection with the investigation have since filed a $3 million lawsuit against the Pima County Sheriff's Department, Breitbart reported. The lawsuit's specific claims were not detailed in available reporting, but the filing signals friction between law enforcement and individuals caught up in the early stages of the probe.
No confirmed suspect in the primary disappearance has been publicly identified. Investigators have not said whether they believe the ransom note writer acted alone or as part of a group, though the notes use the word "we" throughout.
FBI Phoenix Division Special Agent in Charge Heath Yonke acknowledged the ransom communications early in the investigation. He stated that the bureau was "aware of a ransom letter that was sent to the local media and then to national outlets" and confirmed the FBI was "in communication with the family."
Yonke added: "As with every lead, we are taking it seriously."
That careful phrasing reflected the challenge investigators faced from the start. Multiple notes arrived through media outlets rather than directly to the family, an unusual channel that complicated efforts to verify their authenticity and origin. The subsequent arrest of a man for sending a separate, fraudulent demand underscored how quickly opportunists can muddy an active investigation.
Authorities have not publicly confirmed whether Nancy Guthrie is alive or dead. The second ransom note's claim that she "perished" from a heart-related cause remains unverified. No body has been recovered. No burial site has been identified.
Investigators have not disclosed whether forensic analysis of the notes has yielded physical evidence such as fingerprints, DNA, or postal data. They have not said whether the cryptocurrency wallets referenced in the ransom demands produced traceable transactions. The surveillance footage has not led to a publicly identified suspect.
The Pima County Sheriff's Department has kept the investigation formally active. The public release of the notes, six months into the case, suggests traditional investigative channels have not yet produced a breakthrough.
The Guthrie disappearance sits at an uncomfortable intersection of violent crime, celebrity proximity, and institutional credibility. An 84-year-old woman was taken from her home by what appears to have been a prepared intruder. Ransom demands followed. A blood trail was found. And six months later, investigators are turning to the public for help identifying a writer.
The Unabomber precedent worked because one person recognized a voice he had known his entire life. The question now is whether the words in these two notes carry enough personality to trigger the same kind of recognition from someone in the writer's orbit.
When law enforcement has to publish a criminal's own words and hope a neighbor, coworker, or relative connects the dots, it tells you exactly where the case stands. The clock does not stop for Nancy Guthrie's family, and neither should the pressure on anyone sitting on information that could end this.
