Lead: Investigators removed a vehicle from the driveway of Nancy Guthrie’s Tucson-area home Friday evening as the search for the 84-year-old — mother of NBC “Today” co-host Savannah Guthrie — continued. Nancy was reported missing on Feb. 1, 2026, after being last seen at her Catalina Foothills residence around 9:30 p.m. on Jan. 31. Authorities say new correspondence related to the case is under review, and federal and county investigators are coordinating forensic and digital examinations. President Donald Trump, traveling Friday, said federal authorities may soon have “definitive” answers as the probe advances.
Key takeaways
- Investigators towed an SUV-like vehicle from Guthrie’s Catalina Foothills driveway on Friday evening; it was escorted to a lot adjacent to the Pima County sheriff’s office for further examination.
- Pima County and the FBI confirmed they are reviewing new messages related to the case; law enforcement is working to authenticate the communications.
- Two news organizations received alleged ransom notes this week; one reported the demand specified payment in Bitcoin and claimed the victim was “safe, but scared.”
- Former FBI agent Stuart Kaplan told Fox hosts the seizure could yield digital or physical evidence such as GPS, fibers, or hair that links a suspect to the vehicle.
- Observers noted county outdoor-lighting rules leave the Guthrie neighborhood unusually dark at night, a factor mentioned by reporters covering the scene.
- Experts cautioned the public and family about potential scams when messages lack verifiable proof of life; at least one cybersecurity commentator described the communication pattern as consistent with sophisticated fraud without incontrovertible proof.
Background
Nancy Guthrie, 84, was reported missing Feb. 1, 2026, after she was last seen at her home in the Catalina Foothills north of Tucson at approximately 9:30 p.m. on Jan. 31. The Pima County Sheriff’s Department says investigators believe she was taken from the residence against her will. Savannah Guthrie, the NBC “Today” co-anchor, has been publicly identified as the victim’s daughter, bringing extensive national attention to the case.
The FBI joined local investigators early in the inquiry; federal involvement is typical when a suspected kidnapping crosses jurisdictional thresholds or when evidence suggests interstate elements. The Catalina Foothills community has long enforced outdoor-lighting rules to protect dark skies, a local regulation that reporters noted limits ambient illumination near the Guthrie property at night. The combination of a high-profile victim and an apparent ransom-related message has expanded both law-enforcement resources and media focus.
Main event
On Friday evening Pima County investigators and unmarked vehicles arrived at the Guthrie property. A tow truck later removed an SUV-like vehicle from the driveway; Fox reporters observed the vehicle escorted toward a lot beside the sheriff’s office. Law-enforcement personnel were seen briefly at the scene and inside the home’s garage earlier in the day where a blue SUV had been parked. Officials have not publicly specified why this particular vehicle was taken.
Earlier in the week two news organizations reported they received ransom-style messages that contained details described by one outlet as information only a person with close knowledge could provide. TMZ’s Harvey Levin told Fox News the letter asserted Nancy was “safe, but scared,” and demanded Bitcoin. Levin also said language in the message led him to believe the author was operating within a radius that includes Tucson.
The sheriff’s office and the FBI issued a joint social-media notice confirming they were aware of a new message and investigating its authenticity. A 5 p.m. deadline included in an alleged ransom demand passed without public resolution; local stations forwarded copies of the correspondence to investigators for validation. Officials have emphasized they are treating the communications seriously while also evaluating whether the messages contain verifiable proof of life.
Analysis & implications
The decision to remove a vehicle from the scene typically indicates investigators believe it could contain forensically useful material — from trace fibers and biological samples to electronic data such as navigation logs or GPS history. Forensic processing can take days to weeks depending on the scope of testing and the need to preserve chain of custody for potential prosecution. If the vehicle was commonly shared or used by third parties, forensic results could broaden the suspect pool or, conversely, help rule persons out.
Messages sent to media outlets complicate investigative options. Sending alleged ransom notes to high-profile platforms like TMZ guarantees public exposure but can undermine controlled negotiation strategies and may reflect either a perpetrator’s tactical choice or an opportunistic scammer seeking attention. Cybersecurity experts have warned that without incontrovertible proof of life — for example a recent timestamped photograph or a live communication channel — some ransom-style contacts fit profiles of sophisticated fraud rather than genuine abduction.
Politically, the case drew swift national notice because of Savannah Guthrie’s profile. President Trump’s comment that authorities might soon have “definitive” answers highlights how such remarks can shape public expectations; investigators typically avoid promising timelines. Coordination between local sheriff’s investigators and the FBI will be central if forensic or digital evidence yields interstate leads that require federal resources and warrants.
Comparison & data
| Date | Event |
|---|---|
| Jan. 31, 2026, ~9:30 p.m. | Nancy Guthrie last seen at Catalina Foothills residence |
| Feb. 1, 2026 | Guthrie reported missing |
| Earlier this week | Two news outlets received alleged ransom messages; one demanded Bitcoin |
| Feb. 6–7, 2026 (Friday) | Forensics truck present; vehicle towed from driveway and taken to lot near sheriff’s office |
The quick timeline shows authorities moving from initial missing-person response to evidence collection and message authentication within roughly the first week. That pace is consistent with active kidnapping investigations where preservation of physical and digital evidence is a priority. Forensic testing outcomes — DNA, fibers, device data — will determine whether the investigation narrows to identifiable suspects or broader geographic searches.
Reactions & quotes
Family friends, media figures and former investigators have voiced concern and speculation while urging caution. Their remarks reflect a mix of hope for a quick resolution and warnings about public misinformation.
“I think the FBI and its partners are zeroing in and that the noose is getting tighter and tighter.”
Stuart Kaplan, former FBI special agent (on Fox & Friends Weekend)
Kaplan suggested the vehicle seizure could corroborate digital footprints or physical traces that merit returning to the property for follow-up checks. He framed the tow as a potential confirmation step in active evidence gathering.
“The letter begins by saying she is safe, but scared…they are saying that Nancy is aware of it.”
Harvey Levin, TMZ (on Hannity)
Levin described contents of an alleged ransom note his outlet received and said its phrasing led him to estimate a holding radius that may include areas outside Tucson. He also reported the note demanded Bitcoin.
“If they actually have Nancy and they can prove it, then why not send a picture?…Without something verifiable, what you have is the hallmarks of a very-sophisticated scam.”
Morgan Wright, cybersecurity expert (on Fox & Friends Weekend)
Wright emphasized the need for demonstrable proof of life before family members or officials engage in negotiations, noting media-forward communications can be used to increase emotional and public pressure.
Unconfirmed
- The precise contents and full authenticity of the alleged ransom notes are not publicly verified by investigators at this time.
- Reports that the message pinpoints a specific radius around Tucson remain uncorroborated by law enforcement publicly.
- It has not been confirmed that the towed vehicle belonged to a suspect or was used in the alleged abduction.
Bottom line
The seizure of a vehicle and the review of newly surfaced messages mark a transition from initial search operations to targeted forensic and digital inquiry. These steps can produce decisive leads if traces or electronic records tie a suspect to the scene, but they also require time-consuming laboratory work and careful legal procedures to preserve evidence for potential prosecution.
Members of the public and the media should treat unverified communications with caution: investigators need verifiable proof of life before confirming ransom demands or negotiating. For now, the joint FBI–Pima County effort is active; officials have signaled they are following leads and will announce substantive developments when investigators can confirm them.