Five days after 84-year-old Nancy Guthrie vanished from her Tucson home, a second anonymous email landed in TMZ's inbox, this one claiming she was already dead. The note, received February 6, opened with what a source close to the case described as a "sputtering and labored" apology for her "inadvertent death" and offered to surrender her body to her family for an unspecified sum, according to a report citing Air Mail, which spoke to two sources connected to the investigative team.
Investigators deemed the letter "somewhat credible," in part because it originated from the same IP address as an earlier ransom demand. No arrests have been made. The FBI continues to work the case.
For the family of Savannah Guthrie, the Today show host who has publicly pleaded for her mother's safe return, the note marked a grim turn in a saga that has generated a flood of fake tips, copycat demands, and at least one fraud arrest, all while the 84-year-old woman remains missing.
Nancy Guthrie was last seen at her Tucson residence on the evening of January 31, 2026, after her son-in-law dropped her off at approximately 9:50 p.m. FBI-recovered doorbell camera footage later revealed a masked individual carrying a backpack and what appeared to be a holstered firearm tampering with the camera at 1:47 a.m. on February 1, National Review reported.
Bloodstain evidence at the scene told its own story. Retired bloodstain pattern analyst Paulette Sutton described the evidence as "a drip trail, which means it's a continuous source of blood dripping from an object or from a person." That finding suggested Guthrie sustained a bleeding injury, possibly a bloody nose, during the abduction.
The first ransom letter arrived roughly one day after Nancy was taken. It demanded $4 million in Bitcoin and contained details that gave investigators pause: a description of what Nancy was wearing the night she disappeared and the fact that a light in her yard was broken. Those were the kind of specifics, sources indicated, that an outsider would be unlikely to know.
Savannah Guthrie has spoken publicly about the disturbing physical evidence found at her mother's home, including propped-open doors and blood on the doorstep.
The February 6 email shifted the tone from extortion to something darker. Rather than demanding money for Nancy's release, the writer claimed she had died accidentally and proposed a transaction for her remains. The note did not provide details about how she died.
A version of the letter reported by Arizona's Family and cited by Fox News stated: "She perished shortly after she was taken," adding that "she is buried in nature now" and "We are truly sorry."
Retired FBI supervisory special agent Jason Pack told Fox News that the apology itself was telling.
"People who have leverage do not apologize. They demand. A rambling, labored apology for an inadvertent death suggests something went wrong that was not part of the plan."
TMZ founder Harvey Levin, however, pushed back on characterizations that the note his outlet received contained an apology or referenced Nancy's death. That discrepancy raises the possibility that different versions of the letter were sent to different outlets, or that separate actors were involved.
The case has attracted a swarm of opportunists. National Review noted that at least one individual who sent a fraudulent ransom demand was arrested. Meanwhile, TMZ has received at least four separate notes from anonymous writers claiming knowledge of Nancy's whereabouts.
One persistent tipster claimed Nancy was being held in Mexico and said he had seen her there five days earlier. The Washington Examiner reported that the individual used different names and fabricated email addresses across multiple messages, but the same Bitcoin wallet address each time. He previously demanded $50,000 in Bitcoin for the kidnapper's identity and warned it would be his final communication.
Levin publicly urged the tipster to submit verifiable information through TMZ so it could be forwarded to the FBI and potentially qualify for the $100,000 reward.
"If they find her, and they find the kidnapper, then at least there is evidence, because we have it that you're the one who provided the information. So this is a way for you to get that money."
Sorting genuine leads from hoaxes has become one of the investigation's central challenges. Multiple ransom notes have surfaced since the disappearance, each claiming different knowledge of Nancy's location or fate.
The FBI confirmed to news outlets that at least one of the ransom notes is believed to be an authentic communication from the person responsible for Nancy's disappearance. Just The News reported that a second note, reported by CNN, claimed Guthrie died shortly after the kidnapping and described her death as unintentional, aligning with the Air Mail account.
FBI Phoenix Division Special Agent in Charge Heath Yonke stated: "We are aware of a ransom letter that was sent to the local media and then to national outlets. As with every lead, we are taking it seriously."
The bureau also took an unusual step to test the ransom demand's validity, depositing small sums of cryptocurrency into a Bitcoin wallet associated with the notes, Fox News reported.
On February 7, one day after the "apology" note arrived, Savannah Guthrie posted an Instagram video in which she held hands with her siblings and addressed the alleged kidnapper directly:
"We received your message and understand. We beg you now to return our mother to us, so that we can celebrate with her. This is very valuable to us, and we will pay."
The video was a raw moment from a family grasping at any thread of hope. Whether the person on the other end of that message is the actual abductor, or another fraud, remains unknown.
The case has also exposed friction between federal and local law enforcement. FBI Director Kash Patel publicly faulted the sheriff's initial response to the disappearance, adding an institutional dimension to a case already marked by confusion, competing claims, and a trail of dubious tips.
An earlier search near the investigation site turned up a skeleton that dated back centuries and had no connection to the case, a detail that underscored both the intensity and the frustration of the search effort.
Investigators have also been working to identify unidentified DNA recovered from the scene. Pima County's sheriff has said the team is closing in on that evidence, though no suspect has been publicly named.
The first ransom note suggested Nancy was "safe, but scared" and being held somewhere on the West Coast or in northern Mexico, according to Newsmax. Levin said he believed the writer was "familiar with the Tucson television market" and likely from the broader Tucson area. The note contained two deadlines, one that had already passed and a second described as "far more consequential."
Days later, the second note claimed she was dead.
The gap between those two messages, from a ransom demand with deadlines to an apology for an accidental death, is the central mystery. If the notes are authentic, something went badly wrong between the first letter and the second. If they are not, the real story of what happened to Nancy Guthrie on the night of January 31 remains entirely hidden.
The FBI asks anyone with information to call 1-800-CALL-FBI (1-800-225-5324) or submit tips at tips.fbi.gov.
An 84-year-old woman was taken from her home in the middle of the night. Months later, her family still has no answers, no body, and no suspect in custody. Whatever went wrong in this case, whether it was the crime itself, the investigation's early hours, or both, the people who deserve answers most are the ones who have received the least.