TMZ Reports 'Ransom Note' for Return of Savannah Guthrie's Mom

An unverified ransom note demanding millions of dollars in Bitcoin for the safe return of Nancy Guthrie, the 84-year-old mother of NBC's "Today" show co-host Savannah Guthrie, was reportedly received by TMZ on Tuesday, February 3, 2026.

The note, sent via email to the media outlet Tuesday morning, allegedly demands a substantial sum—in the millions—be paid in cryptocurrency to a specific Bitcoin address, which TMZ says it has verified as real and active. It includes a deadline for payment and an implied threat ("or else" element) if the funds are not sent. 

According to reports, the message contains specific details about the crime scene at Nancy Guthrie's home in Arizona, such as what she was reportedly wearing at the time of her disappearance and signs of damage or forced entry, which the sender claims only the perpetrator would know.

TMZ has emphasized that the note remains unverified and its authenticity is unknown—they do not know if it is legitimate or from the actual person(s) responsible. The outlet's executives, including Harvey Levin, described it in videos and statements as appearing like a ransom demand but stressed caution.

Savannah Guthrie & Mom Nancy

This development comes amid the ongoing investigation into Nancy Guthrie's disappearance from her Catalina Foothills home near Tucson. She was last seen Saturday evening (around 9:30 p.m.), reported missing Sunday morning, and authorities (Pima County Sheriff's Department, with FBI assistance) are treating it as a possible abduction or kidnapping, with signs of forced entry and her phone and car left behind. 

The case is being investigated as a crime, and hundreds of leads are being pursued.In response to the ransom reports, the Pima County Sheriff's Department stated they are "aware of reports circulating about possible ransom note(s)" and are "taking all leads very seriously," but they have not confirmed the note's validity or indicated any direct ransom contact with the family.

No payment has been reported, and authorities have not publicly confirmed any authentic ransom demand in the case. The situation remains active as of February 3, 2026.