Ransom notes in Nancy Guthrie kidnapping reveal details only someone at the scene would know, retired FBI agent says

By 
, June 24, 2026

Nearly five months after 84-year-old Nancy Guthrie was taken from her Tucson, Arizona, home, a retired FBI supervisory special agent says the ransom notes sent to her family contain details that point to one conclusion: the person who wrote the first note was present when she was abducted.

Jason Pack, who spent more than two decades with the Bureau, told the New York Post that the first of two ransom communications included specific operational details, what Nancy Guthrie was wearing and a broken floodlight in her yard, that were never part of any public news report.

Pack put it bluntly:

"The specific operational details in that first note, what she was wearing, the damaged floodlight, those aren't things you read in a news report. Someone was there."

That assessment tracks with what investigators have found independently. Breitbart reported that detectives renewed their focus on the notes after discovering they contained details not widely known to the public, and that investigators believe the messages may have originated from those involved in the crime.

Two notes, one IP address, and a trail of contradictions

Both ransom notes were reportedly sent from the same IP address, to Guthrie's family and to news outlets, in the days after her Feb. 1 abduction. The first note claimed Nancy Guthrie was safe. The second told a different story: that Guthrie, who had a heart condition, had died and been "buried with nature." That second note also included an apology.

The contradiction between the two messages is itself a data point. Pack told the Post that the IP address match, while notable, is not necessarily the most telling piece of evidence.

"The IP address match is one data point and it may or may not mean much depending on how sophisticated these people are."

What matters more, he said, is the analytical fingerprint left by the language itself.

"Word choice, sentence construction, how someone frames a demand, whether the tone is businesslike or emotional. If the first two notes read like the same person wrote them and everything after reads like a different person entirely, that tells investigators something important about who they're actually dealing with versus who decided to pile on once this became national news."

That reference to "everything that came after" suggests additional communications beyond the two primary notes, a detail the New York Post did not elaborate on. But the picture that has emerged publicly is already tangled. Fox News reported that TMZ's Harvey Levin pushed back on reports that the note his outlet received contained an apology, clarifying that a separate emailer, not the original ransom note sender, had referenced Guthrie's death. A separate individual emailed TMZ claiming knowledge of Guthrie's whereabouts and demanded $100,000 for information, later implying she was dead.

MORE:  AOC and Bernie Sanders move to block federal Flock camera funding

The FBI itself deposited small sums of cryptocurrency into a Bitcoin wallet to test the validity of one purported ransom demand, Fox News reported. Ransom demands sent to multiple media outlets, including KOLD-TV, KGUN, and TMZ, demanded up to $6 million in Bitcoin, according to National Review, with deadlines that have since passed without payment.

At least one person has been arrested for sending a fraudulent ransom demand, National Review reported, a reminder that high-profile cases attract opportunists willing to exploit a family's suffering for a payday.

An apology, or a negotiating tactic?

Pack's analysis of the second note's apology was particularly pointed. In his experience, the tone of that message suggested something had gone wrong that was not part of the original plan.

"People who have leverage do not apologize. They demand. A rambling, labored apology for an inadvertent death suggests something went wrong that was not part of the plan."

He called that shift in tone a "crack", and said cracks are where cases break open. But he also cautioned against taking the note's claims at face value.

"If the note is to be believed, notifying the family she was gone was the opening move in a new negotiation, not a moment of conscience."

And then the sharpest caveat of all:

"But we're taking the word of someone who abducted an 84 year old woman. That has to be factored into how much weight you put on anything they say."

No law enforcement agency has publicly confirmed that Nancy Guthrie is deceased. The claim rests entirely on the second ransom note, a note whose authenticity the FBI has not confirmed, even as the Bureau has said it believes at least one ransom note is a genuine communication from the kidnapper.

MORE:  Megyn Kelly says Cornell 7 are finished after Hochul hands case to Letitia James

What the doorbell camera captured

The physical evidence from Feb. 1 adds its own layer of dread. FBI Director Kash Patel released recovered doorbell camera footage showing a masked individual with a backpack and what appeared to be a holstered gun attempting to disable the camera at 1:47 a.m. on the morning of the abduction, National Review reported.

A bloodstain pattern analysis at the scene found a "drip trail" consistent with a bleeding individual, possibly from a bloody nose. Pima County Sheriff Chris Nanos declined to say whether there was forced entry. "Whether it's forced entry or not forced entry, that is something we're just not discussing," Nanos said, according to National Review.

The Pima County Sheriff's Department has stated that its investigation remains active. But nearly five months in, there are no known suspects and no public leads.

Savannah Guthrie's on-air plea

On Tuesday, Savannah Guthrie, Nancy's 54-year-old daughter and co-host of NBC's "Today" show, broke down in tears on live television. She told viewers she had no comment on the coverage and was not involved in her network's reporting. But she could not stay silent.

"This is a new story today that is on your radar but this is the life that my sister lives, that I live, that my brother lives, that our extended families live, that our children live everyday."

Then came the plea:

"We are in agony and we cannot be at peace. No matter how much I try to come out here everyday and smile and find that joy, and I will, I promise I will, this is the moment to tell you we need your help, we're begging for your help and I'm not going to miss that opportunity."

It was a moment that stripped away the professional veneer of a national broadcast. An earlier anonymous tip had already claimed Nancy Guthrie was buried in Mexico, a lead whose status remains unclear. The family has lived under a cloud of uncertainty, conflicting ransom messages, and public silence from investigators for months.

MORE:  Legal-status immigrants lose Medicaid as Trump bill eligibility rules take effect

Nancy Guthrie went missing after failing to appear for virtual church services on Feb. 1, Just The News reported. She was 84 years old, living alone in Tucson. A veteran investigator previously suggested she may have been targeted by someone local who assumed her family had money.

The questions that remain

The Nancy Guthrie case sits in a frustrating limbo. The ransom notes contain details that suggest insider knowledge. The IP address links two of them. The FBI has tested at least one demand's validity. Doorbell footage shows a masked, armed figure at the home in the middle of the night. Bloodstains were found at the scene. DNA evidence has been sent to the FBI crime lab.

And yet: no suspects. No arrests tied to the actual kidnapping. No confirmed answer on whether Nancy Guthrie is alive or dead.

Pack's analysis of the notes, that they reveal a kidnapper whose plan fell apart, who shifted from demands to apologies, and whose specific knowledge of the scene points to direct involvement, may be the clearest public framework anyone has offered for understanding what happened. But as he himself noted, every word from the person who took an 84-year-old woman from her home deserves skepticism.

The Pima County Sheriff's Department says the investigation is active. A former FBI agent has previously argued that the kidnappers showed no concern for Nancy Guthrie's life and used the ransom notes to torment her family. Opportunists have already been arrested for piling on with fake demands.

Five months is a long time for a family to live in agony. It is also a long time for a case with physical evidence, digital trails, and doorbell footage to produce zero publicly identified suspects. The Guthrie family is begging for help. Someone out there knows what happened to an 84-year-old woman in Tucson. The question is whether anyone with answers has the conscience to come forward, or whether investigators will have to drag the truth out one crack at a time.

" A free people [claim] their rights, as derived from the laws of nature."
Thomas Jefferson