The FBI continues to investigate multiple ransom notes sent to the family of Nancy Guthrie and various media outlets following the 84-year-old’s disappearance on January 31. While the FBI’s Phoenix field office confirmed that some communications have been dismissed as illegitimate extortion attempts, investigators have not ruled out that other demands may be credible. The investigation remains active as authorities work to verify the authenticity of the messages.
Status of the Ransom Investigation
The FBI has addressed conflicting reports regarding the legitimacy of ransom demands received during the search for Nancy Guthrie. In a statement released Wednesday, the agency clarified that its task force has received several notes throughout the investigation. While the FBI noted that some were deemed "extortion attempts without legitimacy," it maintained that other demands "may potentially be legitimate and are still being investigated as such."

This statement followed reporting by Reuters that suggested investigators had dismissed all ransom notes as bogus. Law enforcement sources later confirmed to the New York Post that the earlier report was based on an incomplete internal document and that the investigative process is ongoing.
Why Some Notes Are Considered Credible
The ransom demands gained traction because they contained non-public details regarding the circumstances of Guthrie’s disappearance. According to reports, these notes included specific information about the victim’s home and her personal belongings, such as a broken security light and the Apple Watch she was wearing.
Investigators have attempted to verify the source of these messages through several technical channels:
- Cryptocurrency Tracking: The FBI sent a small transaction to a Bitcoin wallet mentioned in one of the demands to test its responsiveness. The wallet showed no subsequent activity, and the sender did not acknowledge the transaction.
- Digital Footprints: The task force is currently attempting to trace the authors by analyzing the chain of proxy servers used to transmit the emails.
Challenges in the Search for Nancy Guthrie
The investigation, now in its fifth month, has faced significant hurdles. Authorities have canvassed Tucson-area gun stores, analyzed potential DNA evidence, and detained several persons of interest, all of whom were subsequently released.

Attorney Todd Spodek, who specializes in cybercrime, noted that the nature of the communication may indicate a lack of professional criminal involvement. Spodek observed that the amateurish nature of the initial activity—including a suspect seen on doorbell camera footage—contrasts with the technical complexity required to execute a sophisticated cryptocurrency ransom scheme.
Official Coordination
The investigation is led by state authorities, with the FBI providing technical and investigative support. When asked about the ransom notes during a Wednesday press conference, Kash Patel declined to provide specific details. "I’m not going to comment on that," Patel said. "We are continuing to assist that investigation. We’ve always been in an assist role. It’s a state matter being led by the state authorities."
As the case continues, the task force remains focused on identifying the individuals behind the communications while simultaneously pursuing other leads in the Tucson area.
Related reading