Ransom Note Blunder: The Critical Misstep That May Have Changed Everything in Nancy Guthrie Case

When law enforcement has only hours to work with in a kidnapping case, every decision carries weight. But according to a new Air Mail investigation into the disappearance of Nancy Guthrie, the 84-year-old mother of Today anchor Savannah Guthrie, investigators may have made a tactical choice that fundamentally altered the course of the investigation—and possibly the outcome for the victim.

The story unfolds in a chilling sequence. Nancy was last seen on the evening of January 31 when her son-in-law, Tommaso Cioni, dropped her off at her home in Tucson, Arizona. Early the next morning, FBI doorbell footage captured a masked figure approaching her residence. But it wasn’t until February 2—nearly a full day into her disappearance—that police received the first ransom note. The message claimed Nancy was“safe but scared”and demanded $4 million by February 5, with threats to increase it to $6 million if the deadline passed.

Here’s where things went sideways. The task force deployed to handle the case attempted a standard law enforcement tactic known as“tickling the wire”—a strategy where investigators send a small amount of money to alleged kidnappers with the intention of tracking it and gathering intelligence. Sounds reasonable on paper. In practice? They sent $152 in Bitcoin. It landed in an account and stayed there. Nothing. No communication, no trace, no leads. The money went nowhere, and with it went a potential window of opportunity.

By February 6, a second ransom note arrived. This one carried a different message: the alleged kidnapper was now offering Nancy’s body for an undisclosed sum. According to Air Mail’s sources, the apology for her“inadvertent death”sounded“sputtering and labored”—words that suggest either panic or deception. Savannah and her siblings responded with a video message the same day, telling the person holding their mother:“We received your message and we understand. We beg you now to return our mother to us so that we can celebrate with her.”

When Savannah returned to work in April after nearly three months away, she spoke publicly about the ransom notes for the first time, telling Hoda Kotb that she believed the two notes her family responded to were authentic, though she acknowledged that others circulating were likely fakes.“Most of them, it’s my understanding, I think are not real,”she said.“But I believe the two notes that we received that we responded to—I tend to believe those are real.”A suspect has never been named in connection with Nancy’s disappearance, and the investigation remains open. The tactical decision to send that small sum of money, and what happened—or didn’t happen—afterward, may hold answers that investigators are still chasing.