The first ransom note sent to the family of kidnapped 84-year-old Nancy Guthrie has been publicly revealed for the first time, and a retired FBI agent says its contents point away from a genuine kidnapping-for-ransom.
Arizona journalist Briana Whitney read the full text of the note on a recent episode of the Crime Junkie podcast, the Daily Mail reported. The note, addressed directly to NBC Today show host Savannah Guthrie, opened with a blunt declaration: "Hello, Savannah. We have your mother, Nancy."
Nancy Guthrie vanished from her $1 million Tucson, Arizona, home in the early hours of February 1. Months later, no suspects have been named, no arrests tied to the actual abduction have been made, and the 84-year-old's whereabouts remain unknown. The full text of the note that launched a sprawling, still-unsolved federal investigation now gives the public, and the family, a clearer picture of what investigators have been working with.
The note demanded millions of dollars in Bitcoin, set a hard deadline, and carried an explicit threat. Whitney read the key passage verbatim on the podcast:
"She is safe but scared. She will be held for ransom, and once payment is received, she will be released unharmed. We will be holding her for a maximum of seven days."
The sender included a Bitcoin address and promised Nancy would be returned to Tucson within 12 hours of payment. But the note's closing lines carried a lethal ultimatum:
"If the payment is not received by the last deadline on Monday the 9th at 5pm, she will be killed. Your mother is aware of this and her life is in your hands."
The note then cut off any possibility of dialogue. "There will be no negotiation. Do not play games. Law enforcement will not be able to help you," it read.
Two details at the end of the note gave federal investigators reason to treat it as potentially authentic. Whitney described them on the podcast: a white smartwatch found on the floor near Nancy's bed and a floodlight that had been destroyed in the backyard. Both were non-public details at the time, information only someone present at the scene would have known.
"So those two clues are what gave the FBI kind of the wherewithal to say this is not a hoax."
The FBI has been weighing the authenticity of multiple ransom notes throughout the investigation. Several notes have surfaced since Nancy's disappearance, and authorities have remained tight-lipped about which, if any, are legitimate.
The note's demand for zero communication and zero negotiation struck at least one veteran investigator as a serious red flag. Retired FBI supervisory agent Jason Pack, who analyzed the newly revealed excerpts, told Fox News that genuine kidnappers behave very differently.
"The most telling sign is this no negotiation, no further contact line. Genuine kidnappers wanna keep the line of communication open."
Pack went further, suggesting the note's structure points to a motive beyond money. "The fact that they wanted to cut off communication quickly suggests that they may not have had kidnapping for ransom as a primary motive, even though that's what this says," he said.
That assessment raises an uncomfortable question the FBI and the Pima County Sheriff's Office have so far declined to answer publicly: if the motive was not ransom, what was it? A former FBI official has previously raised pointed questions about the handling of the case, adding to growing scrutiny of the investigation's pace and transparency.
At some point after the note arrived, federal agents deposited $152 into the Bitcoin address the sender had specified. The amount was a fraction of the millions demanded, but it produced a result: a second ransom email arrived, sent from the same IP address as the first note.
The contents of that second email have not been made public. But the matching IP address gave investigators a digital thread to pull, one that, months later, has not led to a public suspect or arrest in the actual abduction.
The day after the $152 deposit, Savannah Guthrie posted a video to Instagram alongside her brother Camron and sister Annie. The clip was a direct plea to whoever held their mother. Savannah, visibly shaken, has broken down publicly more than once during the ordeal.
"We beg you now to return our mother to us, so that we can celebrate with her. This is the only way we will have peace. This is very valuable to us, and we will pay."
The family's anguish was compounded by a stream of fraudulent ransom demands. Three days after Nancy's disappearance, TMZ announced it had received a ransom note demanding $4 million in Bitcoin for her return. TMZ founder Harvey Levin analyzed the note's stated return timeline and estimated Nancy could be held anywhere from the West Coast to northern Mexico, Newsmax reported.
Levin noted that the sender claimed familiarity with the Tucson area. "This person is familiar with the Tucson television market, and based on the way it's written, I believe that this is somebody in that wide Tucson area," he said.
Ransom notes also went to local Tucson TV stations KOLD and KGUN, with demands escalating from $4 million to $6 million in Bitcoin. Deadlines in those notes passed without confirmed payment, according to National Review.
At least one of those notes turned out to be an outright fraud. Derrick Callella, a 42-year-old California man, pleaded guilty to sending a fake ransom note to the Guthrie family via text message. The Washington Examiner reported that the FBI has determined none of the ransom notes sent to the family were genuine, meaning the Guthries were likely never in direct contact with whoever took their mother.
That finding, if accurate, reshapes the entire case. If the ransom notes were all fakes or distractions, the abduction itself may have had nothing to do with money. Nancy Guthrie's fragile health and reliance on daily medication have led some investigators to speculate she may no longer be alive.
The FBI has released one piece of hard physical evidence: recovered doorbell camera footage showing a masked individual with a backpack and what appeared to be a holstered weapon tampering with the camera at 1:47 a.m. on February 1, 2026. FBI Director Kash Patel released the footage publicly, but it has not led to a named suspect.
Retired bloodstain pattern analyst Paulette Sutton, who reviewed evidence from the scene, described what investigators found as "a drip trail, which means it's a continuous source of blood dripping from an object or from a person." That detail suggests violence occurred at the home, a grim counterpoint to the ransom note's assurance that Nancy was "safe but scared."
The case has drawn attention at the highest levels. President Trump has publicly voiced hope for Nancy's safe return as the investigation stretches past the 20-week mark with no resolution.
Both the FBI and the Pima County Sheriff's Office have declined to discuss the legitimacy of the notes or the direction of the investigation in any detail. The Daily Mail contacted both agencies for comment and received no public response.
Savannah Guthrie has since returned to the Today show, even as anonymous tips have pointed the search as far as Mexico. The family's public posture has remained one of desperate cooperation, willing to pay, willing to plead, willing to go on camera and beg.
What they got in return was a cascade of fake notes, a months-long silence from investigators, and a ransom demand that a retired FBI agent says was never really about ransom at all.
An 84-year-old woman is still missing. The people who took her have not been found. And the note that was supposed to explain what happened may have been designed to make sure no one ever did.
