First ransom note in Nancy Guthrie abduction revealed: 'Her life is in your hands'

 July 26, 2026 
Category: 

The full text of the first ransom note sent to Savannah Guthrie's family after her 84-year-old mother Nancy was abducted from her Tucson home has been made public for the first time, and its cold, transactional tone raises fresh questions about a case that has produced no arrests.

Arizona journalist Briana Whitney read the note aloud on an episode of the Crime Junkie podcast, disclosing word-for-word demands that had been kept from the public throughout the months-long investigation. The note opened by addressing Savannah Guthrie, the NBC Today Show host, by name: "Hello, Savannah. We have your mother, Nancy." It continued: "She is safe but scared. She will be held for ransom, and once payment is received, she will be released unharmed. We will be holding her for a maximum of seven days."

The demands were specific. The sender wanted millions of dollars paid in Bitcoin to a designated cryptocurrency address. Once payment cleared, the note promised, Nancy would be released "within 12 hours of deposit to a safe drop-off location back in Tucson." The deadline was blunt: Monday the 9th at 5 p.m.

And then the threat, as the Daily Mail reported:

"If the payment is not received by the last deadline on Monday the 9th at 5pm, she will be killed. Your mother is aware of this and her life is in your hands."

The note closed with instructions designed to cut off any avenue of negotiation: "You will not be able to contact me from here on out. There will be no negotiation. Do not play games. Law enforcement will not be able to help you."

Two details convinced the FBI the note was not a hoax

Whitney, who has been covering the case as a breaking news reporter for the podcast, explained why investigators initially treated the note as legitimate. The ransom demand contained two pieces of information that had not been released to the public: a white smartwatch found on the floor near Nancy's bed and a floodlight that had been destroyed in the backyard of her home.

"Those two clues are what gave the FBI kind of the wherewithal to say this is not a hoax," Whitney said on the podcast. Only someone with direct knowledge of the crime scene would have known those details at the time the note was sent.

The FBI and the Pima County Sheriff's Office have remained tight-lipped about the case throughout the investigation. Neither agency has publicly confirmed the contents of the ransom notes or offered direct comment on their legitimacy. The Daily Mail contacted both agencies for additional information.

The broader investigation has raised pointed questions about how the case has been handled from the earliest hours. Nancy Guthrie, 84, was taken from her $1 million Tucson home in the early hours of February 1. The ransom note arrived days later. Three days after her disappearance, TMZ announced it had received a separate ransom note demanding the Guthrie family pay $4 million in Bitcoin for her return.

Federal agents deposited $152 instead of $4 million, and the money sits untouched

Rather than meet the multimillion-dollar demand, federal agents deposited just $152 into the Bitcoin wallet specified in the ransom communication. The move was a deliberate tracking strategy. As the New York Post reported, investigators used a technique called "tickling the wire", sending a small deposit to see whether the recipient would move the funds, potentially exposing their identity. The $152 remains untouched to this day, suggesting the strategy has not produced the break investigators hoped for.

Attorney Todd Spodek, commenting on the case, described the kidnappers as amateurs based on the ransom note details and available surveillance footage. "An actual, sophisticated operation wouldn't have gotten involved in a kidnapping conspiracy-turned-homicide," Spodek told the Post. "That alone says it's rookie s***." He acknowledged the bind facing law enforcement: "Law enforcement is often placed in a Catch-22 situation, damned if they do, damned if they don't."

The day after the $152 deposit, a second ransom email arrived, sent from the same IP address as the first. That detail deepened investigators' belief that the notes came from the same source. But it did not bring them closer to identifying a suspect.

The case has now stretched for months without a named suspect or an arrest, a timeline that has drawn scrutiny from observers questioning the FBI's assessment of which ransom notes are genuine and which are fakes. Several ransom notes have emerged over the course of the investigation, though the contents of most have not been disclosed.

Doorbell footage showed a masked, armed figure at 1:47 a.m.

Earlier in the investigation, FBI Director Kash Patel released recovered doorbell camera footage from Nancy Guthrie's home. National Review reported the footage showed a masked individual carrying a backpack and what appeared to be a holstered weapon, tampering with the camera at 1:47 a.m. on February 1. Bloodstain analysis from the scene suggested Nancy suffered a bloody nose, a retired bloodstain pattern analyst described the evidence as "a drip trail, which means it's a continuous source of blood dripping from an object or from a person."

Ransom notes sent to local Tucson media outlets and TMZ demanded $4 million in Bitcoin by February 5 and $6 million by February 9. Both deadlines passed without confirmed payment.

FBI Assistant Special Agent in Charge Jon Edwards appealed to the public early in the case: "We are looking at this from every angle, but we need your help," Edwards said, as Breitbart reported. "If you live in the area and you saw something... please report it. Every lead and tip is important. We are aggressively pursuing every single one."

A critical four-day delay before the FBI formally joined the Pima County Sheriff's Department in the investigation resulted in the irreversible loss of key video evidence, Fox News reported. That gap has become one of the most scrutinized decisions in the case.

Savannah Guthrie's plea: 'We will pay'

In the days after the ransom demands surfaced, Savannah Guthrie posted a video to Instagram alongside her brother Camron and sister Annie. The three sat together and addressed whoever had taken their mother.

"We beg you now to return our mother to us, so that we can celebrate with her. This is the only way we will have peace. This is very valuable to us, and we will pay."

The plea was direct. No conditions, no hedging, just a family willing to meet the terms if it meant getting an 84-year-old woman home. That emotional appeal from Savannah Guthrie remains one of the most public moments in a case that has otherwise been defined by silence from the agencies responsible for solving it.

A second purported ransom note, also read by Whitney on the podcast, took a darker turn. Fox News reported that the second note claimed the kidnappers had underestimated Nancy Guthrie's health and that she had died shortly after being taken. It included an apology. The FBI has not confirmed or denied the claim.

The Guthrie family issued a statement early in the investigation: "Right now, our focus remains on the safe return of our dear mom. We thank law enforcement for their hard work on this case and encourage anyone with information to contact the Pima County Sheriff's Department." That focus has not wavered, even as the case has entered its twentieth week with no arrests.

Months in, no suspect, no arrest, no answers

The full text of the ransom note, now public, paints a picture of someone who knew details about the inside of Nancy Guthrie's home and the condition of her property, but who also made demands through channels and methods that legal experts have called amateurish. The Bitcoin wallet sits with $152 in it, unmoved. The deadlines passed months ago. Nancy Guthrie has not been found.

Several ransom notes have surfaced over the course of the investigation. Some have been exposed as fakes. The FBI has not said publicly which, if any, it considers authentic beyond the initial assessment that the first note was "not a hoax", an assessment conveyed through Whitney's reporting, not a direct FBI statement on the record.

No suspects have been named. No arrests have been made. The FBI and the Pima County Sheriff's Office continue to investigate, but neither agency has offered the public a substantive update on where the case stands or whether they believe Nancy Guthrie is alive.

An 84-year-old woman was taken from her home in the middle of the night, and months later, the people responsible for finding her have given her family, and the country, little more than silence. The ransom note is finally public. The answers are not.

About Aiden Sutton

Aiden is a conservative political writer with years of experience covering U.S. politics and national affairs. Topics include elections, institutions, culture, and foreign policy. His work prioritizes accountability over ideology.
A Project of Connell Media.
magnifier