The FBI has determined that every ransom note sent in connection with the kidnapping of 84-year-old Nancy Guthrie, the mother of NBC Today co-host Savannah Guthrie, is a fake. None of the three communications came from anyone connected to her actual abduction, an unnamed senior FBI official told Reuters, a finding that strips away what had been one of the few investigative threads in a case that has gone months with few public developments.
The determination lands with a grim weight. If no one who took Nancy Guthrie ever demanded a ransom, the question of why she was kidnapped, and whether she is still alive, grows darker and harder to answer.
As the Washington Examiner reported, the FBI tested the notes' authenticity by depositing cryptocurrency into an account specified in the ransom instructions. The money sat untouched. No one ever claimed it. That result, combined with what the bureau described only as "other unspecified means," led agents to dismiss all three notes as fraudulent.
Two of the ransom notes surfaced in early February, shortly after Guthrie's disappearance. A third, more recent message claimed to identify the kidnappers. The FBI now believes two of those letters share a common origin, but that the sender had no connection to the abduction itself.
The finding confirms what federal investigators had already begun to suspect. Newsmax reported that authorities arrested one individual back in February for sending a bogus ransom communication. Pima County Sheriff Chris Nanos said at the time: "We have arrested an individual believed to have sent that fraudulent ransom communication. Our focus remains on finding Nancy." FBI Special Agent in Charge Jon Edwards, out of the Tucson office, issued a blunt warning to copycats: "To those imposters who are trying to take advantage of profit from this situation, we will investigate and ensure you are held accountable for your actions."
That arrest now looks like a preview. The bureau's broader conclusion, that all three notes are fakes, suggests the case attracted multiple opportunists willing to exploit a family's agony for a cryptocurrency payday that never came.
With the ransom angle effectively dead, what remains of the investigation rests on physical evidence and technology. National Review detailed how FBI Director Kash Patel released recovered doorbell camera footage showing a masked individual with a backpack and what appeared to be a holstered gun attempting to disable or cover the camera at 1:47 a.m. on February 1. The footage had initially been thought lost because Guthrie had no Google Nest cloud subscription, but agents recovered residual data from Google's backend processing pipeline through a search warrant.
That recovery was a significant forensic achievement, and it gave the public the only known image of a suspect. But months later, no arrest has followed.
Earlier analysis of linguistic patterns in the ransom notes had suggested investigators might use the letters themselves to narrow the search. The FBI's conclusion that none of the notes are genuine renders that thread largely moot, at least as a path to the kidnappers.
Bloodstain evidence from Guthrie's front porch adds another grim dimension. DNA testing confirmed the blood belonged to the 84-year-old. Retired bloodstain pattern analyst Paulette Sutton, formerly of the Shelby County Medical Examiner's Office, described the pattern as "a drip trail, which means it's a continuous source of blood dripping from an object or from a person." That finding, as Breitbart noted, points to physical harm during the abduction itself.
Reuters observed that the FBI's dismissal of the ransom notes "seemed to raise doubts about investigators' fundamental premise that Nancy Guthrie was abducted for ransom to begin with." That is the central problem now facing the bureau.
If the kidnapping was not financially motivated, the range of possible explanations shifts, and not in a reassuring direction. Nancy Guthrie is described as being in frail health and reliant on daily medication. Many now presume she died sometime after being taken. No official confirmation of her fate has been provided.
Some observers had earlier flagged the case as a possible crypto-linked "wrench attack", a term for physically targeting someone to extract cryptocurrency holdings. The fake ransom notes, with their cryptocurrency deposit instructions, may have been designed to mimic that pattern. But the FBI's finding that no one ever touched the deposited funds undercuts even that theory as it applies to the note-writers.
Savannah Guthrie has pleaded publicly with the kidnappers for information about her mother's whereabouts and offered to pay. Those appeals have gone unanswered by anyone the FBI considers credible.
The bureau authorized a $50,000 reward for information leading to Nancy Guthrie's location. That reward remains active. The Pima County Sheriff's Department continues to lead the case, with the FBI playing a key forensic support role.
The investigation has not been without institutional tension. FBI Director Patel previously accused the Pima County sheriff of blocking the bureau from the case for four critical days early in the investigation, a delay that may have cost agents valuable time in a case where every hour mattered given the victim's age and health.
Whether that lost time contributed to the current lack of suspects is impossible to say. But the pattern is familiar: jurisdictional turf disputes slowing a high-profile case while the clock runs on a vulnerable victim.
The FBI has also been exploring new forensic technology in hopes of generating a breakthrough. The doorbell camera recovery showed what the bureau can do when it applies technical resources aggressively. Whether similar tools can now identify the masked figure in that footage, or trace the abductors through other means, remains an open question.
The list of unknowns is long. No suspect has been publicly identified in the kidnapping itself. The kidnappers' motivations remain, in the words of one account, "a mystery." The "other unspecified means" the FBI used to debunk the ransom notes have not been disclosed. The identity of whoever sent the two letters believed to share a common origin has not been made public beyond the single arrest in February.
And the most important question, whether Nancy Guthrie is alive, has no answer anyone in law enforcement has been willing to provide.
The New York Post reported that anonymous FBI and law enforcement sources confirmed the notes were sent by unrelated opportunists, not by anyone involved in the abduction. That finding clarifies one piece of the puzzle while deepening the darkness around everything else.
Former FBI personnel have weighed in on various aspects of the case, including one retired agent's analysis suggesting at least one ransom note appeared crafted to avoid triggering death-penalty-eligible charges. If the note-writers were opportunists rather than kidnappers, that calculation takes on a different meaning, perhaps someone sophisticated enough to game the legal system but reckless enough to exploit a kidnapping for profit.
Five months in, the Nancy Guthrie case has produced recovered footage, confirmed blood evidence, one arrest for a fake ransom note, and a formal FBI determination that none of the ransom communications are real. What it has not produced is a suspect in the kidnapping, a credible lead on her whereabouts, or an explanation for why an 84-year-old woman was taken from her home in the middle of the night.
The fake ransom notes are a sideshow, a cruel one, but a sideshow. Someone saw a missing elderly woman and a desperate family and decided to cash in. The FBI caught at least one of them. Good.
But the real crime remains unsolved. And every day that passes without answers is another day the people responsible for taking Nancy Guthrie face no consequences at all.