Nearly five months have passed since Nancy Guthrie vanished from her Tucson, Arizona home, and the case continues to shake the nation. The 84-year-old mother of Today show co-anchor Savannah Guthrie was reported missing on February 1, 2026, setting off one of the most high-profile missing persons investigations in recent American history. With ransom notes, FBI surveillance footage, cryptocurrency demands, and a $1 million family reward all part of the story, every new Nancy Guthrie update draws intense public attention. This article breaks down the full timeline, the latest developments, and what investigators have revealed so far.
Who Is Nancy Guthrie? A Short Biography
| Detail | Information |
|---|---|
| Full Name | Nancy Guthrie (née Long) |
| Age | 84 |
| Birthplace | United States |
| Nationality | American |
| Famous For | Mother of NBC journalist Savannah Guthrie |
| Last Known Location | Catalina Foothills, Tucson, Arizona |
| Reported Missing | February 1, 2026 |
| Children | Savannah Guthrie (NBC News anchor), Annie Guthrie |
The Night Nancy Guthrie Disappeared
What Happened on January 31 and February 1
The evening of January 31, 2026, began like any ordinary night for the Guthrie family. Nancy had dinner at her daughter Annie Guthrie’s home in Tucson. A family member dropped her off at her own residence in the Catalina Foothills neighborhood around 9:45 p.m. That was the last time anyone confirmed seeing her alive.
The following morning, February 1, Nancy was reported missing. Pima County Sheriff Chris Nanos quickly stated his belief that she had been abducted. Evidence recovered at her home supported that conclusion — bloodstains found at the scene were later confirmed through forensic analysis to be Nancy’s. A multi-agency investigation was immediately launched, bringing together the Pima County Sheriff’s Department, the FBI, US Customs and Border Protection, and search-and-rescue teams.
The Doorbell Camera Footage
Ten days into the investigation, on February 10, FBI Director Kash Patel publicly released still images and a short video recovered from Nancy Guthrie’s doorbell camera. The footage showed a masked individual wearing long sleeves, pants, and a backpack approaching her front door in the early morning hours before her disappearance was reported.
The suspect appeared to use a glove to cover the camera lens and placed plants in front of the device in what investigators described as a deliberate attempt to block the view. Patel said the footage had been recovered from residual backend data tied to the device. The suspect was described as approximately 5’9″ to 5’10” tall and dressed in dark clothing. Despite widespread circulation of the images, the individual has never been publicly identified.
Key Physical Evidence
Beyond the doorbell footage, investigators gathered a significant body of physical evidence. Bloodstains on the porch and in the nearby street were tested and confirmed as Nancy’s. Multiple surveillance videos from the surrounding neighborhood were collected and reviewed. Separately, data from Nancy’s pacemaker reportedly recorded activity until approximately 2:28 a.m. on the night of her disappearance, after which signals suddenly stopped — a detail that became one of the more haunting pieces of evidence in the case.
The Ransom Notes: A Complicated Picture
The First Notes and Bitcoin Demands
In the days immediately following Nancy Guthrie’s disappearance, ransom notes began appearing at media outlets rather than arriving directly to the family — a pattern that former FBI agents publicly described as “highly unusual.” On February 2, Tucson CBS affiliate KOLD-TV reported receiving a letter demanding payment for Nancy’s release. Investigators reviewed the note and took it seriously enough to share it with the FBI, though authorities declined to confirm its authenticity publicly.
TMZ founder Harvey Levin then claimed to have received multiple notes of his own. One stated that Nancy was still alive but “scared” and aware of the demands being made. By February 8, reporting indicated the ransom demand had reached $6 million in Bitcoin, with a deadline set for 5 p.m. on February 9. That deadline passed without any public confirmation of payment or contact from the alleged captors. On the same day the doorbell footage was released, a small Bitcoin transaction of roughly $152 was sent to the digital wallet address listed in one of the notes — a detail that investigators have not publicly tied to any confirmed party in the case.
The Second Note and Its Devastating Claim
The most significant development in the months following the disappearance came on June 22, 2026, when NBC News, ABC News, and CBS News simultaneously reported on the contents of a second ransom note. That note, sent to media outlets on February 6 — just five days after Nancy vanished — contained a claim that had been kept from the public for nearly five months at law enforcement’s request: the alleged kidnappers said that Nancy Guthrie had died shortly after the abduction.
According to sources cited by multiple news organizations, the second note expressed regret over her death but made no apology for the kidnapping and included no further demands for payment. Investigators familiar with the case have said they believe both credible notes were written by the same person or group responsible for Nancy’s disappearance. Savannah Guthrie acknowledged in a March interview with former co-host Hoda Kotb that she believed the two notes her family received and responded to were authentic.
Savannah Guthrie’s Public Response
When the contents of the second note became public in late June, Savannah returned to the Today show set with visible emotion. She did not comment directly on the specifics of the report but delivered a tearful appeal to anyone who might have information. “No matter how much I try to come out here every day and smile and find that joy — and I will, I promise I will — this is a moment to tell you that we need your help,” she said. “We’re begging for your help, and I’m not going to miss that opportunity.”
Earlier in February, the family had released an Instagram video addressing the alleged captors directly. Savannah’s statement that “we will pay” was a public signal the family was prepared to meet any legitimate demands. The family also announced a $1 million reward for any information leading to Nancy’s safe return.
Where the Investigation Stands in June 2026
The Wrench Attack Theory
One of the most significant recent developments in the Nancy Guthrie update cycle came on June 13, when former FBI special agent Jennifer Coffindaffer posted about what she called a “huge breakthrough.” She was reacting to a blog post from CertiK, a cybersecurity company valued at approximately $2 billion that has raised nearly $300 million in funding from major investors including Coinbase and Tiger Global Management.
In that post, CertiK publicly designated Nancy Guthrie’s abduction as a “wrench attack by proxy” — a specific type of crypto crime in which criminals target a loved one of someone who holds a cryptocurrency account, using physical force or kidnapping to coerce that person into surrendering their digital assets. The designation implies that the alleged motive may have been to gain access to a Bitcoin account belonging to Savannah Guthrie or another family member. Coffindaffer described CertiK’s willingness to make such a public designation as meaningful, given the company’s credibility and resources.
The Sheriff’s Department and FBI Coordination
Following the CertiK report, Fox News Digital correspondent Michael Ruiz revealed that Pima County Sheriff Chris Nanos had been asked about the cybersecurity company’s findings. While Nanos declined to discuss the CertiK report publicly, he confirmed that the information had been flagged and was under review. The sheriff’s department has consistently maintained that the investigation into Nancy Guthrie’s disappearance remains “active and ongoing.”
A private investigator who spent a week on the ground in Arizona working the case pro bono told podcast Criminally Obsessed that he believes Nancy was taken to Northern Arizona rather than across the border, contradicting theories that had centered on a Mexico connection. He described the abduction as targeted and deliberate, not random.
New Ransom Note Claims in Late June 2026
As of June 28, the case took yet another twist. A new communication surfaced — separate from the two notes the family has acknowledged — claiming the existence of a hidden phone containing a short video of the alleged kidnapper with Nancy Guthrie. The communication, reported by TMZ, demanded one Bitcoin in exchange for a password to access the device. TMZ stated it had requested a screenshot to verify the claim. Investigators have not publicly confirmed the authenticity of this latest communication, and the investigation remains ongoing.
Retired FBI special agent Jason Pack, speaking to Parade, explained why new information has been surfacing at this stage. “Five months in, the fire needs fresh wood,” Pack said. “The subject went silent. The digital trail hit a wall. Tip flow on even a high-profile case like this one starts to thin out over time. Releasing this now likely wasn’t a surprise to the Guthrie family or investigators.”
FAQ
Q: Has Nancy Guthrie been found? A: As of late June 2026, Nancy Guthrie has not been found, and her whereabouts remain unknown. Authorities continue to describe the investigation as an active kidnapping case. No arrests have been made in connection with her disappearance.
Q: What did the ransom notes in the Nancy Guthrie case say? A: Two notes considered credible by investigators were sent to Tucson media outlets in early February 2026. The first demanded millions in Bitcoin for Nancy’s return. The second, sent on February 6, claimed she had died shortly after the abduction. The contents of the second note were kept from the public until June 22, 2026.
Q: Is Savannah Guthrie still on the Today show? A: Savannah Guthrie stepped back from broadcasting duties, including coverage of the 2026 Winter Olympics, after her mother’s disappearance. She has made periodic appearances on Today, including an emotional plea for information aired in June 2026.
Q: What is a wrench attack and how does it relate to the Nancy Guthrie case? A: A wrench attack is a crypto crime where someone physically targets a person — or their loved one — to gain access to a digital wallet, bypassing the need to hack it. Cybersecurity firm CertiK publicly categorized Nancy Guthrie’s abduction as a wrench attack by proxy in June 2026, suggesting the motive may have been to access cryptocurrency held by the Guthrie family.
Q: How can I report tips in the Nancy Guthrie case? A: Anyone with information is urged to contact the FBI tip line at 1-800-CALL-FBI (1-800-225-5324), visit tips.fbi.gov, or call the Pima County Sheriff’s Department at 520-351-4900.
Conclusion
The disappearance of Nancy Guthrie has unfolded as one of the most closely watched missing persons cases in the United States in recent memory. From the earliest ransom notes demanding Bitcoin to the revelation that a second note claimed her death, to the latest theories involving cryptocurrency crime, the case has evolved in ways that few could have anticipated. Nearly five months on, her family remains in a state of painful uncertainty, and investigators continue working what they describe as an active investigation. If you have any information that could help bring answers to the Guthrie family, please contact the FBI or Pima County Sheriff’s Department using the numbers listed above.
Read About : why is jim carrey trending today
