Why ‘Nancy Guthrie’ and ‘ransom’ spiked: the confirmed, the reported, and the faked
The reported contents of a first ransom note in the disappearance of Savannah Guthrie’s 84-year-old mother surfaced this week through a podcast, driving a search spike. Here is what the FBI and courts have confirmed, what is only reported, and what has been debunked as a hoax.
By David Weaver
Publisher & Editor
Published July 23, 2026, 4:04 PM ET
On July 23, 2026, two very different things pushed the same word to the top of search. One is a Netflix release. The other is a grieving family still waiting for answers. This story is about the second one, and it deserves care.
The searches for “Nancy Guthrie” and “ransom” climbed after the true-crime podcast “Crime Junkie” published the reported contents of the first ransom note in the disappearance of Nancy Guthrie — the 84-year-old mother of NBC “Today” co-anchor Savannah Guthrie — in an episode uploaded July 22, 2026, with host Ashley Flowers and Phoenix reporter Briana Whitney. A wave of coverage followed on July 23, as The Wrap reported. Because those note details are being reported, not officially released by the FBI, the most useful thing to do is separate three tiers that are easy to blur: what is confirmed, what is only reported, and what has been faked.
One quick disambiguation, then we set it aside: the bare term “ransom” also spiked because Netflix’s Western drama “Ransom Canyon” dropped its second season the same day, July 23, 2026. That is a naming coincidence. It has nothing to do with the Guthrie case, and it is the last time it appears here.
What is confirmed
The confirmed record comes from law enforcement, the courts, and the family. Nancy Guthrie was taken from her home in the Catalina Foothills area of Tucson, Arizona, overnight January 31 into February 1, 2026; she was reported missing after not appearing at church that Sunday, and investigators believe she was taken against her will, per CBS News’s timeline of the case. The case remains active and open. As of this writing, no one has been arrested or charged in the abduction, and no suspect has been publicly named, despite multiple searches, DNA analysis, and the ransom messages sent to the family, as CNN reported.
Two things belong in this tier precisely because they are so often stated wrongly. First, Nancy Guthrie has not been found, and, per her family and investigators, she is presumed dead — a careful phrase that reflects the absence of any recovered remains, not a confirmation of death. This report uses “presumed dead,” never “dead” or “murdered.” Second, on July 1, 2026, the FBI’s Phoenix field office stated on the record that it had received several ransom notes tied to the case: some it deemed illegitimate extortion attempts, while others may be legitimate and remain under investigation. What the FBI confirmed is that notes exist and are being sorted — not the specific wording of any note.
Savannah Guthrie stepped away from “Today” and has repeatedly pleaded publicly for information. The family offered a reward of up to $1 million; the FBI added $100,000, and Tucson Crime Stoppers more still — a publicized total of roughly $1.2 million for information, as NBC News reported.
What is only reported
This is the tier that drove the July 23 spike, and it is the one to hold at arm’s length. The specifics below come from the “Crime Junkie” podcast and the outlets that covered it — they are the reported, purported contents of notes the FBI has not officially released. None of it is confirmed by investigators.
As reported, the first note began, “Hello, Savannah. We have your mother, Nancy…” and laid out a demand of $4 million in Bitcoin by Thursday, February 5, rising to $6 million if unpaid by Monday, February 9, according to AOL and Fox News. A purported second note claimed Nancy had died shortly after being taken. Investigators reportedly believe the two notes likely came from the actual abductor or abductors and were sent from the same IP address, CBS News reported.
Read that carefully: a reported belief that the notes came from the abductor is not an official confirmation that Nancy Guthrie has died, and the dollar figures and wording are unverified. Treat every quote and number in this section as reported, not established.
What was faked
There is a separate strand that must not be folded into the abduction. On July 2, 2026, Derrick Anthony Callella, 42, of California, pleaded guilty to two felony counts for sending spoofed, fake ransom messages to the Guthrie family; sentencing is set for September 10, 2026, as ABC7 Los Angeles reported. The guilty plea is court-confirmed, and what it establishes is narrow but important: those particular messages were a hoax. Callella is not charged with the kidnapping, and his messages are separate from the abduction itself. His case is the clearest example of why the FBI has had to sort real communications from opportunistic fakes.
Sorting it out, claim by claim
The map below tags each claim by tier — confirmed by the FBI or courts, reported/purported and not officially released, or debunked/fake — and links the source behind every label. Use the filters to see one tier at a time.
Confirmed, Reported, or Faked
Nancy Guthrie case: what's confirmed, what's only reported, and what was faked
A claim-by-claim map of the open FBI investigation into the disappearance of Nancy Guthrie, sorting three things people are conflating: facts confirmed by the FBI or the courts, the purported ransom-note contents that surfaced through a podcast and press (not officially released), and the separate hoax notes one man has pleaded guilty to sending.
This is the real, open missing-person case of Nancy Guthrie in Tucson, Arizona — not the Netflix drama 'Ransom Canyon.'
ConfirmedTIER: CONFIRMED. The bare search term 'ransom' spiked on July 23, 2026 for two unrelated reasons: the reported contents of a Guthrie ransom note surfaced, and Netflix released Season 2 of its fictional Western 'Ransom Canyon' the same day. The show is a naming coincidence with no connection to this investigation.
Nancy Guthrie, 84 — mother of NBC 'Today' co-anchor Savannah Guthrie — was taken from her home in the Catalina Foothills area of Tucson, Arizona, overnight Jan 31 to Feb 1, 2026. Investigators believe she was taken against her will.
ConfirmedTIER: CONFIRMED (FBI / law enforcement). She was reported missing after not appearing at church on Sunday, Feb. 1; authorities describe the disappearance as an abduction.
The case remains active and open. As of July 23, 2026, no one has been arrested or charged in the abduction, and no suspect has been publicly named.
ConfirmedTIER: CONFIRMED. Despite multiple searches, DNA analysis and ransom messages, no charge has been filed in connection with Nancy Guthrie's disappearance.
Nancy Guthrie has not been found. Per her family and investigators, she is presumed dead; no remains have been recovered.
ConfirmedTIER: CONFIRMED framing. 'Presumed dead' is the careful term used by the family and investigators — it is not a confirmation of death, and this map does not state she is dead or was murdered.
Large rewards are posted, and Savannah Guthrie stepped away from 'Today.' The family offered up to $1 million, the FBI $100,000, and Tucson Crime Stoppers an additional amount — a publicized total of roughly $1.2 million for information.
ConfirmedTIER: CONFIRMED. Tips go to the FBI at 1-800-CALL-FBI (tips.fbi.gov) or Tucson Crime Stoppers (88-CRIME). Savannah Guthrie has publicly pleaded for information about her mother.
The FBI's Phoenix field office stated on July 1, 2026 that it had received several ransom notes tied to the case: some were deemed illegitimate extortion attempts, while others may be legitimate and remain under investigation.
ConfirmedTIER: CONFIRMED (this is the FBI's on-record statement). What the FBI confirmed is that notes exist and are being sorted — NOT the specific contents of any note, which have not been officially released.
The reported wording of the FIRST ransom note — said to begin 'Hello, Savannah. We have your mother, Nancy…' — surfaced publicly for the first time via the 'Crime Junkie' podcast, then a July 23 press wave.
UnknownTIER: REPORTED / PURPORTED — as reported by media and the 'Crime Junkie' podcast (episode uploaded July 22, 2026; host Ashley Flowers with Phoenix reporter Briana Whitney), NOT officially released or confirmed by the FBI. Treat the wording as unverified.
That first note reportedly demanded $4 million in Bitcoin by Thursday, Feb. 5, rising to $6 million if unpaid by Monday, Feb. 9.
UnknownTIER: REPORTED / PURPORTED — figures as reported by outlets describing the note, not officially released by the FBI. The demand and deadlines are unverified.
A purported SECOND note claimed Nancy Guthrie had died shortly after being taken. Investigators reportedly believe the two notes likely came from the actual abductor(s) and were sent from the same IP address.
UnknownTIER: REPORTED / PURPORTED — as reported by CBS News describing what investigators believe. This is a reported belief about the notes' origin, not an official confirmation that Nancy Guthrie has died.
Derrick Anthony Callella, 42, of California, pleaded guilty on July 2, 2026 to two felony counts for sending spoofed, fake ransom messages to the Guthrie family. Sentencing is set for September 10, 2026.
DisputedTIER: DEBUNKED / FAKE. The guilty plea is court-confirmed, and what it establishes is that these particular messages were a hoax. Callella is NOT charged with the kidnapping, and his messages are separate from the abduction itself.
How this is calculated
Each claim is tagged by the strength of its record. 'Confirmed' means the FBI, a court, or the family has stated it on the record, corroborated by reputable outlets. 'Unknown' is used here for the REPORTED / PURPORTED tier: the ransom-note wording and figures that outlets and the 'Crime Junkie' podcast attribute to notes the FBI has NOT officially released — reported, not confirmed. 'Disputed' is used for the FAKED tier: messages that have been debunked as hoaxes and are separate from the abduction. Note contents are never presented as fact, and because no remains have been recovered and no one has been charged, the map says 'presumed dead,' never 'dead' or 'murdered.'
Data as of July 22, 2026 · verified July 22, 2026 · v1
Assumptions, limitations & sources
Assumptions
- · Statuses reflect the public record as of the data date in a fast-moving, open investigation, and will change as the FBI's work and the September sentencing proceed.
- · Where a claim rests on the reported contents of a note the FBI has not released, it is placed in the REPORTED / PURPORTED tier no matter how widely it has been repeated.
Limitations
- · The specific ransom-note wording and dollar figures are reported by media and a podcast, not officially released or confirmed by the FBI; they may be inaccurate or incomplete.
- · No remains have been recovered and no one has been charged with the abduction; 'presumed dead' reflects what the family and investigators have said, not a confirmed death.
- · This map does not speculate about who is responsible; the identity of any abductor is unknown.
- · This is the real, open missing-person case of Nancy Guthrie in Tucson, Arizona — it is not related to the Netflix drama 'Ransom Canyon,' whose second season arrived the same day and inflated the bare search term 'ransom.'
Sources
- CBS News — Nancy Guthrie ransom notes likely came from abductor who said she died, investigators believe — CBS News, checked July 22, 2026
- CNN — Nancy Guthrie ransom notes: Some were extortion attempts, FBI says (July 1, 2026) — CNN, checked July 22, 2026
- The Wrap — Nancy Guthrie Case Update: 'Crime Junkie' Shares Details From First Ransom Note (July 23, 2026) — The Wrap, checked July 22, 2026
- AOL — First Nancy Guthrie Ransom Note Began, 'Hello Savannah, We Have Your Mother': Report (July 23, 2026) — AOL, checked July 22, 2026
- ABC7 Los Angeles — Derrick Callella pleads guilty to making fake Nancy Guthrie ransom demand — ABC7 Los Angeles, checked July 22, 2026
- NBC News — Savannah Guthrie says family is offering $1 million reward after mother, Nancy Guthrie, disappears — NBC News, checked July 22, 2026
- TODAY — Savannah Guthrie Responds to Update on Missing Mom Nancy, Renews Plea for Answers — TODAY, checked July 22, 2026
- Netflix Tudum — Ransom Canyon Season 2 (release July 23, 2026; the naming coincidence) — Netflix, checked July 22, 2026
This is what modern SEO looks like: not just an article, but a useful resource people can return to, cite, and share. See how this newsroom is growing · See DavidWeaver's SEO packages
If you have information
This is an open, active investigation into a missing person. Anyone with information is asked to contact the FBI at 1-800-CALL-FBI (1-800-225-5324) or submit a tip online at tips.fbi.gov; tips may also go to Tucson Crime Stoppers (88-CRIME). A reward of up to roughly $1.2 million has been publicized for information leading to Nancy Guthrie or to an arrest. This report will be updated as officials confirm more; where the record is still only reported or has been debunked, it is labeled that way on purpose.
Sources
- Nancy Guthrie ransom notes likely came from abductor who said she died, investigators believe — CBS News · primary source
- Nancy Guthrie ransom notes: Some were extortion attempts, FBI says — CNN
- Nancy Guthrie Case Update: ‘Crime Junkie’ Shares Details From First Ransom Note — The Wrap
- First Nancy Guthrie Ransom Note Began, ‘Hello Savannah, We Have Your Mother’: Report — AOL
- Derrick Callella pleads guilty to making fake Nancy Guthrie ransom demand — ABC7 Los Angeles
- Savannah Guthrie says family is offering $1 million reward after mother disappears — NBC News