EXCLUSIVE: Nancy Guthrie

Summary of EXCLUSIVE: Nancy Guthrie

by Audiochuck

53mJuly 22, 2026

Overview of EXCLUSIVE: Nancy Guthrie

In this Crime Junkie special, Ashley Flowers and breaking news reporter Brianna Whitney unpack the still-unsolved kidnapping of Nancy Guthrie, mother of Today host Savannah Guthrie. The episode recaps the first days of the case, the ransom notes, the surveillance footage of the suspected abductor, and the major investigative complications that may be slowing progress. It also explores a new theory that the crime was part of an “evolved wrench attack” targeting Savannah’s wealth through her mother’s abduction.

Case Timeline and What Happened

  • The case began in late January/early February, when Nancy Guthrie was reported missing from her home in Tucson, Arizona.
  • Early on, the situation seemed like a possible vulnerable-adult disappearance, but investigators quickly believed she had been taken from her home.
  • Key early evidence included:
    • Blood drops on the front porch
    • A missing Nest security camera
    • A destroyed floodlight in the backyard
  • Nancy was known to have serious health issues, including a pacemaker and limited mobility, which became central to later theories about what happened to her.

The Ransom Notes and Video Evidence

Ransom note 1

  • Addressed directly to Savannah: “Hello, Savannah. We have your mother, Nancy.”
  • Demanded millions of dollars in Bitcoin, with deadlines attached.
  • Threatened Nancy’s life if payment was not made.
  • Claimed she would be released to a “safe drop-off location back in Tucson” after payment.
  • Included details only the abductor would likely know, such as the white smartwatch near her bed and the broken floodlight.
  • The wording suggested the writer may not be a native English speaker:
    • Use of “USD” instead of just “dollars”
    • Unusual phrasing and tone

Surveillance footage

  • The FBI later released video of a man on Nancy’s porch, nicknamed “Porch Guy.”
  • He appeared to be wearing a ski mask, carrying a backpack, and possibly using shrubbery to obstruct or manipulate the camera.
  • Investigators later asked neighbors to check footage not only from the night Nancy disappeared, but also from January 11, which raised the possibility that the house had been cased earlier.

Ransom note 2

  • Much darker and more final in tone.
  • Claimed Nancy had died shortly after being taken and that her death was likely heart-related.
  • Said she was “buried in nature now.”
  • Ended with an apology, and essentially cut off further communication.
  • The family publicly shifted to asking for proof of life and later to seeking closure and the return of Nancy’s remains.

Investigative Problems and Missteps

The episode strongly emphasizes that the investigation has been hampered by several issues:

  • The scene was released too early

    • Reporters were allowed near the house and driveway while the case was still active.
    • This likely contaminated the scene, especially the front porch area with blood evidence.
  • Law enforcement coordination appeared strained

    • Pima County Sheriff’s Department and the FBI seemed to have different priorities and methods.
    • There was tension over where evidence, including DNA, was being tested.
  • Mixed public messaging

    • Sheriff Chris Nanos gave different answers in different interviews.
    • The episode cites a text response from the sheriff to a media inquiry that was dismissive and added to public frustration.
  • Several people were detained, but no arrests followed

    • A DoorDash driver named Carlos was detained and later released.
    • Mary Daly and her son Luke Daly were also detained and released.
    • None of them were ultimately charged, and the case remains open.

The New Theory: An “Evolved Wrench Attack”

The episode’s major analytical focus is a theory from retired chief investigator Lisa Miller:

What a wrench attack means

  • A “wrench attack” is a robbery/extortion method targeting someone’s digital assets, especially cryptocurrency.
  • An “evolved” wrench attack uses a vulnerable person as leverage against a wealthy target.

How this theory fits the Guthrie case

  • Savannah Guthrie was publicly visible and financially successful.
  • She had recently been featured in content highlighting her ties to Tucson and her family, including Nancy.
  • The theory proposes:
    • A mastermind abroad or outside the U.S. created the extortion plan and wrote the ransom notes.
    • A local actor (“Porch Guy”) carried out the physical abduction.
  • The use of Bitcoin, odd English phrasing, and anonymous digital communication all support the possibility of a foreign or remote mastermind.
  • The plan may have collapsed because Nancy’s severe health problems were not anticipated.

Where the Case Stands Now

  • No arrest has been made.
  • Nancy Guthrie is still missing.
  • Authorities have reportedly been DNA-testing evidence, including mixed samples from inside the home.
  • The ransom wallet received only a small test payment, after which there was no further activity.
  • Multiple outside tips and emails have circulated, but none have led to a resolution.

Main Takeaways

  • The case began as a missing-person report but quickly became a suspected kidnapping with ransom demands.
  • The ransom notes and surveillance video suggest planning, but the physical execution may have been sloppy.
  • Investigative missteps, public confusion, and inconsistent law enforcement communication may be hindering progress.
  • The most plausible theory presented is that this was a cryptocurrency extortion scheme that went wrong when Nancy died unexpectedly.
  • The immediate goals now are identifying “Porch Guy,” locating Nancy, and determining whether the ransom notes were authentic or part of a larger setup.

What the Episode Is Asking Listeners to Watch For

  • Any credible information about “Porch Guy”
  • Confirmation about the source of the ransom notes
  • DNA or genealogy breakthroughs
  • Signs that Nancy Guthrie’s remains may be found in rural desert terrain
  • Any future press conference or public statement from investigators