Pima County Sheriff Chris Nanos issued a blunt warning on July 14: scammers are circulating QR codes on social media that solicit money under the guise of funding the investigation into the disappearance of 84-year-old Nancy Guthrie, the mother of NBC Today anchor Savannah Guthrie. The department's message was direct, it will never ask for money related to this case or any investigation.

"Please do not send money to people you do not know or scan QR codes requesting payment," the Pima County Sheriff's Department stated. Nanos added a simple instruction: "Stay alert and help spread the word."

The scam warning lands more than five months into one of the most closely watched missing-persons cases in the country, an investigation that has drawn the FBI, produced surveillance footage of a masked intruder, yielded confirmed bloodstain evidence, and generated a stream of fake and possibly real ransom demands. Through it all, Nancy Guthrie has not been found. And as the months drag on, the case has become a magnet for grifters looking to profit from a family's agony and the public's goodwill.

A night of disconnected cameras and silence

Nancy Guthrie was last seen by family at approximately 9:30 p.m. on January 31 at her Tucson, Arizona, home. She was 84, sharp-minded, and physically frail, Sheriff Nanos said she "couldn't walk 50 yards by herself." She relied on daily medication that, without it for 24 hours, "could be fatal."

At 1:47 a.m., her doorbell camera disconnected. At 2:28 a.m., her pacemaker app showed a disconnect from her phone. Those two data points, laid out by Nanos at a February 5 press conference, form the narrow window in which investigators believe she was taken.

The family didn't learn anything was wrong until the next morning, when a concerned friend alerted them that Nancy had missed a church service. After searching the property for roughly an hour, the family called 911 at 12:03 p.m. on February 1. Patrol teams arrived about ten minutes later.

What they found prompted an unusual response. Nanos deployed his homicide team, not because a body had been recovered, but because of what the scene revealed.

"It's not standard. Typically, our homicide team comes out when we have a homicide, a body. This one was done simply because of what the surveyors were telling us."

He declared the home a crime scene. "We believe now, after we processed that crime scene, that we do, in fact have a crime scene," Nanos told reporters on February 2. He confirmed that Nancy did not leave on her own. "We know she didn't just walk out of there, that we know."

Surveillance footage and bloodstains

On February 10, the FBI released recovered doorbell camera footage. National Review reported that the footage showed a masked individual wearing a backpack and an apparent holstered weapon approaching the home and attempting to disable the camera at 1:47 a.m. on February 1.

Blood was found near Nancy's front doorstep. Breitbart reported that investigators confirmed the blood was hers. Bloodstain pattern analysis suggested she suffered a bloody nose, with a "drip trail" consistent with a bleeding person being moved through the home.

The FBI announced a $50,000 reward for information leading to Nancy's return or the arrest of anyone involved. Sheriff Nanos, speaking about the family, said simply: "They just hurt. Understandably so. The community is hurting with you. We really just want mom back."

Despite the reward, the physical evidence, and the surveillance images, months passed without an arrest tied to the abduction itself.

Ransom notes, imposters, and a California arrest

The case quickly attracted people looking to exploit it. Multiple ransom demands surfaced, some sent to media outlets, others directly targeting the family. Demands reportedly reached as high as $6 million in Bitcoin. Some notes asked for items as bizarre as an Apple Watch and a floodlight.

At a February 5 press conference, FBI Special Agent Heith Janke announced the arrest of Derrick Callella, a California man who allegedly sent fake ransom texts related to the case. Janke's assessment was withering: "It was someone that was trying to profit from it. A total imposter." Callella was released on $20,000 bond and did not enter a plea.

Nanos indicated the FBI had made additional arrests connected to false ransom communications. On June 26, appearing on Tucson radio station 1030 KVOI AM's The Buckmaster Show, the sheriff said: "I think the FBI has done a number of arrests for false or fake ransom notes." He referenced yet another suspected fake that same day. "I think we're looking at another one of those today with what's been reported. But we'll let the FBI do their work."

The ransom notes that investigators deemed potentially legitimate contained details that only someone present at the scene would know, raising the stakes for every new communication the family and authorities received.

A ransom note claims Nancy died

The most devastating development came when a ransom note sent to an Arizona television station claimed Nancy had died accidentally shortly after her abduction. The Washington Examiner reported that the note stated she is "buried with nature now." Investigators deemed two notes legitimate, the first demanding cryptocurrency, the second disclosing her accidental death, both sent shortly after the February 1 disappearance.

The note was delivered from the same IP address as a previous ransom communication and included details from the night of the abduction. AP News reported that Tucson TV station KOLD received multiple ransom notes and notified authorities, withholding the contents at the FBI's direction. KOLD news director Jessica Bobula stated: "The station notified authorities and has shared only what the FBI has released about the notes."

Despite the note's grim claim, neither law enforcement nor the Guthrie family confirmed Nancy's death. The search continued.

A cold-case detective offered a theory that gained traction. The New York Post reported that retired detective Brian Martin believed the kidnappers underestimated Nancy's fragile health. "She had some sort of medical event when it was happening, because obviously it'd be an incredibly stressful situation and very taxing on somebody," Martin said. He theorized the captors disposed of her body when she "was no longer of value to them in that monetary gain that they're hoping to get."

A family's public plea, and a system's limits

Savannah Guthrie, absent from the Today show since February 1, addressed the public repeatedly in the weeks after her mother's disappearance. On February 2, she posted on Instagram: "We believe in prayer. We believe in voices raised in unison, in love, in hope." She closed with two words: "Bring her home."

On February 4, Savannah, her brother Camron, and her sister Annie posted an Instagram video reading letters addressed to whoever had taken their mother. Savannah acknowledged the difficulty of knowing whom to trust: "We live in a world where voices and images are easily manipulated. We need to know without a doubt that she is alive and that you have her."

She described her mother's condition plainly: "Her health, her heart is fragile. She lives in constant pain. She is without any medicine. She needs it to survive. She needs it not to suffer."

By February 7, Savannah posted another video with a message that appeared directed at a captor: "We received your message and we understand. We beg you now to return our mother to us so that we can celebrate with her." She added: "This is very valuable to us and we will pay."

Authorities searched Annie Guthrie's Arizona property that same day, describing it as "part of the normal course" of the investigation. Concerns about safety in the area around Nancy's home had already prompted earlier alerts from the sheriff's department.

Misinformation as a second crisis

As the investigation stretched into its sixth month, the scam warning issued on July 14 underscored a problem Sheriff Nanos had flagged for weeks. On The Buckmaster Show, he acknowledged the double-edged nature of public attention: "People have great interest and that's good because it helps us, but then it gets really abused."

The QR code scam is only the latest example. Fake ransom notes, fraudulent fundraising, and social media misinformation have plagued the case from the start. Nanos addressed a demand letter circulating online in the weeks before July 14, calling it "likely fake."

The pattern is familiar to anyone who has watched high-profile cases attract con artists. But the sheer volume in this case, multiple fake ransom demands, at least one arrest for fraudulent texts, and now a QR code money scheme, suggests a level of exploitation that goes beyond the usual noise. Every false lead drains investigative resources. Every scam erodes the public trust that Nanos has repeatedly asked the community to extend.

On June 23, Savannah Guthrie returned to the Today set to address a ransom note that claimed her mother had died. Her words were raw:

"This is a new story today that's on your radar. But this is the life that my sister lives, I live, that my brother lives, that our extended family lives, that our children live every day and we are in agony. And we cannot be at peace."

She added: "We love our mom and we'll never stop looking for her, ever."

Even as the sheriff's office has said it is "getting closer" in the search, no suspect in the actual abduction has been publicly identified. The FBI's $50,000 reward remains on the table. Nancy Guthrie remains missing.

What remains unanswered

The case leaves hard questions open. Who was the masked, armed figure on the doorbell camera? Were the two ransom notes deemed legitimate sent by the same person or group that took Nancy? If the note claiming her death is accurate, where is her body? And why, after more than five months, has no one been charged with the abduction itself?

President Donald Trump weighed in, stating: "I am directing ALL Federal Law Enforcement to be at the family's, and Local Law Enforcement's, complete disposal, IMMEDIATELY."

The conduct of the Pima County Sheriff's Office during the investigation has itself drawn scrutiny. But for now, the most immediate concern is simpler: scammers are circulating fake QR codes, and people who want to help are being told to hand over money to strangers on the internet.

An 84-year-old woman vanished from her home in the middle of the night. Months later, the people who should be helping are being warned not to fall for grifters. That tells you something about the state of this case, and about the kind of people who see someone else's nightmare as an opportunity.