Journalist Brianna Whitney reveals never-before-disclosed details about the abduction of Nancy Guthrie — mother of Today Show host Savannah Guthrie — from her Tucson home on February 1st, 2026. Two ransom notes demanded millions in Bitcoin, but a second note claimed Nancy died of heart failure shortly after being taken, with the phrase 'she is buried in nature now' suggesting the author may be a non-native English speaker. Six months later, the suspect known only as 'Porch Guy' remains unidentified, and a retired investigator's new theory — pointing to a foreign perpetrator — may finally have legs.
Key Moments
Brianna Whitney
“The money was demanded in USD. So US dollar typically if this is coming from somebody here you don't say that.”
Brianna analyzes a key linguistic oddity in ransom note one — specifying 'USD' — as evidence the author may not be American, which feeds directly into the new foreign-perpetrator theory.
“She perished shortly after she was taken. We believe it was heart related. She is buried in nature now. Nothing you could have done could have changed the outcome. We are truly sorry.”
Brianna reads the full text of ransom note number two, which dramatically shifted tone from the first note's demands to what appeared to be an admission that Nancy had died in captivity.
“I believe this may be because the person writing the notes is foreign, English is their second language, or they are using like a translator to get their point across.”
Brianna explains why the unusual phrasing in both ransom notes — 'USD,' 'she is buried in nature now' — points toward a non-native English speaker as the author.
“There was never proof of life. The only thing that ever happened was that there was a very small amount of money put into the Bitcoin wallet... by authorities.”
Brianna reveals that despite Savannah Guthrie's public pleas for proof of life, the kidnappers never responded, and authorities quietly tested the wallet with a small deposit attached with a message to make contact.
“If that's a contaminated scene in a court of law, that's so wild. I mean, that could really impact everything.”
Brianna reflects on the decision by Sheriff Chris Nanos — who later admitted it was a mistake — to let reporters walk up to Nancy Guthrie's front porch while she was still missing, potentially contaminating key DNA evidence.
Crime Junkie is one of the most popular true crime podcasts in the world, hosted by Ashley Flowers and Brit Prawat. The show covers a wide range of criminal cases — from cold cases and unsolved murders to kidnappings and disappearances — with a focus on detailed, research-driven storytelling. In this exclusive episode, host Ashley Flowers is joined by journalist Brianna Whitney, who covered the Nancy Guthrie abduction case from the inside as an Arizona news reporter before joining Crime Junkie.
Takeaways
1
Ransom notes flag a foreign perpetrator Both ransom notes contained linguistic anomalies — specifying 'USD' rather than just 'dollars,' and the phrase 'she is buried in nature now' — that a retired investigator and Brianna Whitney believe indicate the author is a non-native English speaker or used a translation tool. This is the centerpiece of the most credible new theory in the case.
2
Second ransom note claimed Nancy died within days Ransom note two arrived while deadlines from the first note were still active and stated Nancy 'perished shortly after she was taken' due to her heart condition and asked for forgiveness. This shifted the investigation from a live-hostage rescue to a recovery and homicide case, though authenticity of the notes remains unconfirmed.
3
Scene was released before FBI finished processing The Pima County Sheriff's Department allowed media to walk up to Nancy Guthrie's front porch — where drops of her blood were visible — before the FBI had completed evidence collection. Sheriff Chris Nanos later admitted this was a mistake, and Whitney warns it could compromise prosecution if an arrest is ever made.
4
Authorities quietly probed Bitcoin wallet for contact Rather than waiting passively, authorities deposited a small test amount into the Bitcoin wallet listed in ransom note one along with a message asking the kidnappers to make contact. The wallet was never used again after that, suggesting the kidnappers either saw it and went silent, or had abandoned the account entirely.
5
Porch Guy may have cased the home weeks earlier Authorities asked neighbors to check surveillance footage not only from the night of January 31st–February 1st but also from January 11th — three weeks prior. Whitney and investigators believe this date may show the same suspect casing the Guthrie property before carrying out the abduction.
6
FBI-sheriff turf war slowed critical evidence processing The Pima County Sheriff's Department sent DNA evidence to a private lab in Florida, while the FBI wanted it processed at Quantico. The resulting confusion and public friction between agencies created delays and gaps in information that Whitney says have never been fully resolved.