The Nancy Guthrie case: an 84-year-old taken from her bed, a masked figure at the door, and ransom notes no one can verify.
Nancy Guthrie, 84, the mother of "Today" co-host Savannah Guthrie, was last seen at her home in the Catalina Foothills of Tucson, Arizona, on the evening of Jan 31, 2026. Relatives found her missing the next morning. The FBI and the Pima County Sheriff are investigating it as a kidnapping for ransom. She has not been found, and no one has been charged.
Case file at a glance
Unlike the other files on this site, this case is recent and still active, and Nancy Guthrie has not been found. Investigators believe she was taken in her sleep. A masked, armed person was filmed at her front door. Many ransom notes arrived and some were hoaxes. The family has been cleared, and the FBI's reward is now up to $100,000 with a family reward of $1 million on top.
- Taken in her sleep, investigators believe.Her doorbell camera disconnected at 1:47 a.m. on Feb 1 and her pacemaker app disconnected from her phone at 2:28 a.m.
- A masked, armed figure.The FBI released video of an armed person tampering with the front-door camera. The suspect is described as male, about 5 feet 9 to 5 feet 10, average build, carrying a black 25-liter Ozark Trail Hiker Pack.
- Ransom notes, some false.Several notes and messages arrived. The FBI is treating some as possibly legitimate and others as extortion attempts. A California man pleaded guilty on July 2, 2026 to federal charges over a false note.
- The family has been cleared.Sheriff Chris Nanos said on Feb 16 the family was cleared as suspects and described them as victims.
Editorial assessment of public sources, not a finding of fact. Nobody named here has been charged unless this page says so.
What happened
Details come from an ABC7 timeline, NBC reports from July and August 2026, and the FBI's own page. Where an item is only from a lesser outlet we say so. This case is moving, so check the sources below for updates.
Dinner at her daughter's
Nancy Guthrie takes an Uber to her daughter's home for dinner. Investigators speak with the driver.
Home
Family drops her off. Her garage door opens at about 9:48 p.m. and closes at 9:50. The FBI lists this evening as when she was last seen.
The camera goes offline
Her doorbell camera disconnects. At 2:12 a.m. its software detects a person, but no video exists because the camera had no subscription and footage was overwritten.
The pacemaker app
Her pacemaker app disconnects from her phone.
Found missing
Relatives arrive and find her missing. The family calls 911 at 12:03 p.m.
Ransom messages
A first note goes to a Tucson TV station on Feb 2. A second, on Feb 6, says she died and "is buried in nature now." On Feb 7 a message to local media demands bitcoin by a Feb 9 deadline. The family says in a video they would pay and asks for proof of life. Investigators say they cannot confirm any of it. One note was traced to an impostor, who was arrested.
FBI releases video
The FBI releases images of an armed person tampering with the front-door camera. A man is detained for questioning and released without charges.
A glove and DNA
An unknown male DNA profile is lifted from a glove found about two miles away. On Mar 4 the sheriff says the glove traced to a restaurant worker who "has nothing to do with the case."
Family cleared
Sheriff Chris Nanos says the family is cleared as suspects.
A $1 million reward
The family announces a $1 million reward. ABC7 puts the combined total at $1.2 million. The FBI's reward was $50,000 then and its page now says up to $100,000.
New DNA technology
The FBI is analyzing DNA recovered earlier from the home using new technology.
A guilty plea over a false note
A California man pleads guilty to two federal counts: sending a ransom demand across state lines and using a device to threaten or harass. NBC reports the FBI is still evaluating some notes as legitimate and the case continues as a kidnapping for ransom.
Notes released
The sheriff's office releases the text of two ransom notes and asks the public to help identify the writer. The sheriff urges anyone who knows something to come forward.
Unverified skull report
Lesser outlets report a possible skull fragment found in an Oro Valley wash. We could not confirm this with an official source, and no one has said it relates to her. -Maybe
Victims
An 84-year-old with a pacemaker, taken from her home.
Photo: FBI Seeking Information page. The photo's original owner is not stated; shown at the site owner's direction. Contact us to have it removed.
MissingNancy Guthrie, 84
The FBI describes her as a vulnerable adult who has difficulty walking, has a pacemaker, and needs daily medication for a heart condition. She is the mother of "Today" co-host Savannah Guthrie.
We found no freely licensed photo, so a silhouette is shown. Family members or others who want a photo added, changed, or removed can use the contact form at the bottom of this page.
Evidence
What exists, and what each piece may or may not mean.
| Item | What is known | Disputed or unknown |
|---|---|---|
| The door camera | It disconnected at 1:47 a.m.; software detected a person at 2:12 a.m. with no video saved. | Why no footage exists beyond the unsubscribed camera: the sheriff says it was overwritten. |
| FBI video | An armed person appears to tamper with the front-door camera. | Whether the same person was at the door earlier: speculative, no date or time on the images. |
| The pacemaker app | Disconnected at 2:28 a.m. | What it shows about her location after: not public. |
| The glove and DNA | A glove two miles away yielded an unknown male DNA profile. | It traced to a restaurant worker unrelated to the case, per the sheriff. |
| Ransom notes | Several. Some are fake, some may be real. | Which are authentic: the FBI has not said. The "buried in nature" note is unverified. |
| Other cameras | Photos from three other cameras were recovered. | Reportedly nothing suspicious. Not released. |
Public documents
The FBI page and national news reports are the public record. The sheriff released the text of two ransom notes in July 2026.
| Document | Holder | What it shows | Access |
|---|---|---|---|
| FBI: Nancy Guthrie | FBI | Reward, description, video, tip line. | Online, free |
| ABC7: the full timeline | ABC7 New York | Dated timeline. | Online, free |
| Two ransom notes released July 31, 2026 | Pima County Sheriff's Department | Full text published; quoted in news. | Quoted in news |
| Case file and 911 call | Pima County Sheriff; FBI | The investigation. | Withheld or sealed |
Access labels: Online, free = we could open it. Fan-hosted copy = a private researcher posted scans; originals are held by the named agency, and we cannot vouch for completeness. Quoted in news = reporters read it; we did not see the document itself. Request needed = held by an agency or court. Withheld = the holder has not released it. We cannot reach non-public records, and we do not try to.
Online discussion (unverified)
Where people talk about this case online, and how to read it.
| Platform | Live search | What you tend to find |
|---|---|---|
| Google: Reddit | site:reddit.com search | Public Reddit threads that Google has indexed, including old discussions. |
| Google: X and Twitter | X and Twitter posts | Public posts and profiles that appear in search results. |
| Google: Facebook | Public Facebook pages and posts | Only public pages and groups that Google can see. Private groups never appear. |
| Google: Instagram and TikTok | Instagram and TikTok | Public posts, memorials, and videos. |
| Google: forums | Forums and message boards | Long-running true-crime forums. |
| Google News | Latest news | Newest reporting, which is usually more reliable than posts. |
| Search Reddit | Long discussion threads and theories, often by amateur researchers. No sign-in needed to read. | |
| X (Twitter) | Search X | Short posts, news links, and anniversary notes. May require sign-in. |
| Search Facebook | Public groups and family or community pages. Requires sign-in. | |
| Search #nancyguthrie | Memorial and true-crime posts. Requires sign-in. | |
| YouTube | Search YouTube | Documentaries, news clips, and interviews. Quality varies widely. |
Be careful with online theories. Naming a private person as a suspect can harm an innocent family, and many "identifications" on forums have been wrong. Our own tools could not read these platforms: Reddit blocks automated access, and the others require an account. The Google searches above work from your browser. To get new public mentions by email, make a free Google Alert for the case name in quotation marks.
Coverage timeline and verification
What local and national reports say, and when we last checked for a solution.
| Date | Outlet | What it reported | Link |
|---|---|---|---|
| Feb 5, 2026 | |||
| Axios Phoenix | |||
| Timeline, $50K reward, impostor arrest (seen in search results; not opened). | |||
| Read | |||
| Feb 10 to Feb 24, 2026 | |||
| ABC7 New York timeline | |||
| FBI video, family cleared, $1 million reward. | |||
| Read | |||
| July 2, 2026 | |||
| NBC News | |||
| Guilty plea over a false ransom note; FBI still evaluating some notes. | |||
| Read | |||
| Aug 3, 2026 | |||
| NBC News | |||
| Six months on; ransom notes released. | |||
| Read | |||
| Current | |||
| FBI | |||
| Reward up to $100,000. | |||
| Read |
Status is re-checked on a regular schedule. If you know of a development we missed, use the clue form near the top of this page or the contact form, and include a link.
Suspects
There is no named suspect. The family has been cleared.
The armed, masked person at the door
Why named: The FBI video shows him tampering with the front-door camera. He is about 5 feet 9 to 10, average build, with a black Ozark Trail Hiker Pack.
Against: He has not been identified. The FBI seeks information leading to his identity.
A man detained for questioning in February
Why named: He was detained on Feb 10 and questioned, per ABC7.
Against: He was released without charges.
A restaurant worker whose glove was found
Why named: An unknown male DNA profile on a glove two miles away was traced to him.
Against: The sheriff said he has nothing to do with the case.
The authors of the ransom notes
Why named: Notes and messages demanding bitcoin or saying she died.
Against: Some were hoaxes. The FBI treats some as possibly legitimate. A California man pleaded guilty over a false one.
Where a card shows a silhouette, we found no photo. Anyone who wants a photo added, changed, or removed can use the contact form at the bottom of this page.
Latest lead: the ransom notes and the DNA
The most useful open threads are the identity of the notes' writer and the work on DNA from the home.
What is known
- The sheriff's office released two ransom notes on July 31 and asked the public to identify the writer.
- The FBI said in July it still evaluates some notes as legitimate and still calls it a kidnapping for ransom.
- The FBI was analyzing DNA from the home with new technology as of April.
What would settle it
- Identify the armed person from the FBI video, the backpack and any retail or camera data.
- Identify the note writers and separate real contact from hoaxes.
- Match the DNA recovered from the home against genealogy databases if the FBI approves it.
A planned abduction of a vulnerable person, with noise from opportunists
We put the chance that the abduction was planned, rather than a random burglary, at roughly 85%, because of the disabled camera and the targeting of an elderly woman at night. We put the chance of an arrest within a year at roughly 25%, because the FBI and the sheriff have many leads and large rewards but no named suspect.
Editorial judgment, not statistics.
Elimination matrix
"—" means no public information, not a clean result.
| Person or idea | At the home | Physical link | Legal outcome |
|---|---|---|---|
| Armed person on FBI video | ✓ on camera | ? DNA work ongoing | — unidentified |
| The family | ✗ cleared by sheriff | — | — |
| Restaurant worker (glove) | ✗ unrelated per sheriff | ✗ DNA matched | — |
| Ransom-note writers | ? unknown | — | ? one plea over a false note |
✗ excluded or contradicted · ✓ supports · ? disputed · — nothing public. No cell is an official finding.
Our hypothesis
Editorial reading of public records. A working theory, not a finding, and it names no individual.
A planned kidnapping, followed by ransom messages from several senders
- The cameras were targeted. The doorbell camera disconnected before a person was detected.
- The victim was chosen. A frail woman living alone, with a high-profile daughter.
- The notes are mixed. Hoaxes crowd out any real demand.
- The outcome is unknown. No one has said she was found, and a note claiming she died is unverified.
Judgment, not statistics.
Missing links
Questions raised by gaps in the public record.
1. The armed person
Who he is, how he got there, and what he drove.
2. The real notes
Which messages, if any, came from the abductors.
3. The timeline
What happened between 2:28 a.m. and the first note.
4. The DNA
Whether new technology produced a match.
5. The pacemaker data
Whether it shows her location or movement.
6. Other cameras and vehicles
Neighborhood footage and license-plate data.
Evidence gaps
"Not public" means we could not find a report.
| Item | Tested | Gap |
|---|---|---|
| Home DNA | Analyzed with new technology as of April. | Results: not public. |
| Door camera video | The camera had no subscription. | No footage exists. |
| Ransom notes | Two released; others withheld. | Authenticity: not stated. |
| Police file | Held by the sheriff and FBI. | Public index: not available. |
Forensic tech
| Tool | What it could do | Status here |
|---|---|---|
| DNA from retained evidence | Identify a donor or exclude people. | Unknown; not reported |
| Forensic genetic genealogy | Identify an unknown donor from relatives. | Needs usable DNA; none reported |
| Ballistics database (NIBIN) | Link recovered casings or bullets to other crimes. | Not reported |
Solved cases
Local cases that moved after decades.
Carol Sue Klaber (Boone County, KY, 1976)
Investigators say a private genealogy investigation helped them identify Thomas Dunaway, who died in 1990, as the man who killed the 16-year-old. He cannot be indicted, so prosecutors sent a letter saying he would have been charged. The lesson: genealogy can name a killer after decades, even when no trial is possible.
Forensic genetic genealogy training
In 2024, local investigators were being trained in the technique, which has already helped solve Cincinnati-area cases, according to FOX19. The lesson: the tool is now local, so cases with usable DNA have a real path forward.
Golden State Killer
Old crime-scene DNA matched relatives in a public database and led to a 2018 arrest. The lesson: a usable sample can still work after decades.
Case details come from public news coverage and the Boone County Sheriff's cold-case list. Confirm in court records.
False leads
| Claim | Source and date | Where it stands |
|---|---|---|
| The family was involved | Online speculation | The sheriff cleared the family on Feb 16. |
| A skull fragment is hers | Lesser outlets, Oct 2026 | Unconfirmed. An earlier bone near the home was ruled ancient by authorities. |
| The glove DNA is the abductor's | Early reports | The sheriff traced it to an unrelated restaurant worker. |
| Anyone who emails about the case | Ransom emails sent to a former FBI agent and others | Many notes are hoaxes. Report any to the FBI. |
Where
She lived in the Catalina Foothills neighborhood of Tucson, Pima County, Arizona. We do not publish the street address.
Open in maps: Catalina Foothills, Tucson. We show no photograph of the scene.
Source ratings
| Source | Type | Rating | Use with care because |
|---|---|---|---|
| FBI Seeking Information page | Federal agency | A | States the reward, description, and tip line. |
| ABC7 New York timeline | National news | B+ | A long dated timeline; we did not check every item. |
| NBC News, July and Aug 2026 | National news | B+ | Guilty plea and ransom-note release. |
| Axios Phoenix, Feb 2026 | Local news | B | Seen in search results; not opened. |
| Smaller outlets (skull fragment) | Lesser outlets | D | We did not rely on them. |
Records
Pima County Sheriff's Department
Lead local agency. ABC7 lists 520-351-4900; please confirm before calling.
FBI Phoenix Field Office
Tips: 1-800-CALL-FBI or tips.fbi.gov.
Pima County Attorney
Charging decisions.
Sample public-records request
Under the Arizona Public Records Law (A.R.S. 39-121 et seq.), I request copies of non-exempt records relating to the January 31 to February 1, 2026 disappearance of Nancy Guthrie from Catalina Foothills, Tucson, including incident reports, laboratory reports, and any evidence inventory. Please send electronic copies. If any part is withheld, please identify the exemption relied on and release all reasonably segregable material.
Agencies often withhold records of open investigations, so expect partial answers.
Remembering the victims
Nancy Guthrie is 84. Her family has appealed publicly and asks anyone with information to come forward.
News & databases
In the news
Loading headlines…
Sources
Every fact on this page comes from one of these. Where they disagree, we say so above.
- Nancy Guthrie, FBI Seeking Information (reward up to $100,000, description, suspect description, tip line; photo).
- Nancy Guthrie abduction: the full timeline, ABC7 New York (timeline, ransom messages, DNA, family cleared, $1 million reward).
- FBI investigating notes as legitimate extortion demands; California man pleads guilty, NBC News, July 2, 2026 (plea and FBI statement).
- The latest in the Nancy Guthrie case, NBC News, Aug 3, 2026 (six-month mark, ransom-note release).
- Nancy Guthrie update: timeline, $50K reward and impostor arrest, Axios Phoenix, Feb 5, 2026 (seen in search results; not opened).
This is an active case and new facts may appear. It is a disappearance investigated as a kidnapping, not a confirmed killing, and is on this site because the owner asked. The skull report is from lesser outlets and unconfirmed. We do not publish her address. Time stamps are as reported by ABC7 and may be corrected.
Change log
- Oct 8, 2026: File published.