One of the ransom notes sent after 84-year-old Nancy Guthrie vanished from her Tucson, Arizona, home opened with what sources described as a "bizarre, rambling apology" for her accidental death, and offered to return her body for a price, the New York Post reported, citing an Air Mail investigation that relied on sources close to the case.
The Feb. 6 email, sent to TMZ from what investigators traced as the same IP address used in earlier blackmail letters, reportedly shifted the entire investigation from a kidnapping case to one of potential homicide. No arrests have been made. No new leads have surfaced. And the family of the "Today" show host Savannah Guthrie has been left in a limbo that grows more agonizing by the week.
But the account is already contested. TMZ, the outlet that received the note, pushed back after the Air Mail story was published, stating that the ransom note it received "did not say that Guthrie was dead or contain an apology." TMZ described the notes it was sent as coming from someone who "claimed to know who kidnapped Nancy and where she was" but "denied being the abductor himself."
That contradiction sits at the center of a case that has generated a barrage of ransom demands, public pleas, and unanswered questions, all while an elderly woman's family waits without answers.
Nancy Guthrie went missing Feb. 1 from her home in Tucson. Authorities believe she was taken against her will. The very next day, a ransom note arrived demanding $4 million in bitcoin. It described Guthrie as "safe but scared" and spelled out terms for an exchange.
That first note convinced investigators they were dealing with real kidnappers rather than, as the Post put it, "sick internet pranksters." It contained details specific enough to be taken seriously, though the precise contents have not been made public.
The AP News documented that the FBI identified a masked male suspect, approximately 5-foot-9, caught on surveillance footage tampering with a camera on Nancy Guthrie's front porch the night she disappeared. The family later announced a reward of up to $1 million for information leading to her recovery.
What followed was a deluge. Ransom notes flooded in to the family and to media outlets. Investigators sorted them into three categories they labeled "the good, the bad, and the ugly." Notes that contained specific, verifiable information about Guthrie were deemed "good." The Feb. 6 note, the one referencing her accidental death, was labeled "bad."
Most of the notes were fakes. Savannah Guthrie said as much in a "Today" interview earlier this year, calling out the cruelty of the hoaxes while acknowledging two notes she believed were genuine.
On Feb. 7, one day after the note containing the alleged apology arrived at TMZ, Savannah Guthrie and her siblings posted a 20-second Instagram video. In it, they addressed the purported abductor directly, saying they had "received your message and we understand."
The family begged for Nancy's return. Savannah said her mother's return was "very valuable to us" and added simply: "we will pay."
In a later interview, Fox News reported, Savannah Guthrie addressed the flood of communications head-on. She confirmed that while many notes were not real, she tends to believe two specific notes her family received and responded to were genuine.
"I believe the two notes that we received, that we responded to, I tend to believe those are real."
She also had words for the hoaxers: "A person that would send a fake ransom note really has to look deeply at themselves, to a family in pain."
That comment deserves to land. An 84-year-old woman is missing. Her daughter is on national television pleading for her life. And opportunists used the moment to send fraudulent ransom demands to a grieving family. The depravity of that conduct speaks for itself.
Savannah Guthrie has also spent more than $500,000 on private investigators to find her mother, a measure of both her desperation and the apparent pace of the official investigation.
The Air Mail report and TMZ's response create a factual conflict that remains unresolved. Air Mail, citing sources close to the case, described the Feb. 6 email as opening with a rambling apology for Nancy Guthrie's accidental death and suggesting her body could be returned for a price. TMZ flatly denied that characterization of the note it received.
There are a few possible explanations. The notes may have been different communications misidentified as the same one. The IP address match, attributed to sources close to the case, not to an official agency statement, may be less definitive than presented. Or one account may simply be wrong.
What is not in dispute is the effect. Investigators shifted the case from kidnapping to potential homicide after reviewing the Feb. 6 note. That pivot carries enormous weight, both for the direction of the investigation and for the family's dwindling hope of a safe recovery.
The investigation has also drawn attention at the highest levels. Breitbart reported that a separate new message was received by Tucson TV station KOLD and forwarded to the FBI and the Pima County Sheriff's Department for authenticity verification. The sender used a different IP address than the one tied to the original ransom note, likely employing a secure server, and included information the sender claimed would prove its authenticity. President Trump, speaking aboard Air Force One, hinted that "definitive" information from the DOJ or FBI could be released "reasonably soon."
Months into the case, the public accounting remains thin. No arrests. No confirmed suspects beyond the masked figure on the surveillance footage. No body recovered. The lead law enforcement agencies have not even been clearly identified in public reporting, a gap that itself raises questions about coordination and transparency.
The Pima County sheriff said at the 100-day mark that investigators were "getting closer," but the family's experience suggests a more complicated picture.
The FBI has collected physical evidence, including DNA from a hair sample recovered at Nancy Guthrie's Tucson home, as previously reported. Whether that evidence has produced actionable leads is unknown.
Meanwhile, the relationship between the family and local law enforcement has shown signs of strain. The Pima County sheriff acknowledged he is no longer in direct contact with the Guthrie family, a development that raises obvious questions about the state of the working relationship between investigators and the people most desperate for answers.
Additional ransom notes claiming to know Nancy Guthrie's location have continued to surface even as Savannah returned to her anchor chair at "Today", a sign that the case remains active in the worst possible way, generating noise without resolution.
The open questions in this case are not minor loose ends. They go to the core of what happened to Nancy Guthrie and whether anyone will be held accountable.
Can the IP address linking the Feb. 6 email to earlier blackmail letters be confirmed through official channels, or does it rest solely on unnamed sources? What is the current official classification of the case, kidnapping, homicide, or something else? Have any suspects been identified, even if not publicly named? And has the investigation produced anything beyond the surveillance footage, the hair sample, and a stack of ransom notes that may or may not be genuine?
The family has done everything a family can do. They responded to the notes. They posted public pleas. They offered a million-dollar reward. They hired private investigators at enormous personal expense. They went on national television and begged.
The question now is whether the institutions responsible for solving this case, the FBI, the Pima County Sheriff's Department, federal law enforcement at every level, can match that effort with results.
An 84-year-old woman was taken from her home. Her family has been tormented by hoaxers, whipsawed by contradictory reports, and left waiting for months. At some point, "getting closer" has to mean getting somewhere.
