Forensic linguists analyze ransom notes in Nancy Guthrie kidnapping case

Nancy Guthrie, 84, was abducted from her Arizona home in January 2026; the second ransom note claims she died shortly after being taken, though authorities cannot verify this claim.
Someone recognizes the writing in the ransom demand notes.
Savannah Guthrie's appeal to the public after police released the notes her mother's kidnappers sent.
Mark

Why would anyone release ransom notes to the public? Doesn't that tip off the person who wrote them?

Mimi

That's the calculation police make when they have nothing else. Six months in, they had few leads. The notes are their only real artifact. They're betting that someone who knows the writer—or knows their voice—will recognize something in the way the sentences are built.

Mark

But couldn't the writer just claim they didn't write it?

Mimi

Of course. But forensic linguists don't work on confession. They work on pattern. If police develop a suspect through other means, they can compare that person's known writing to the notes. The patterns either match or they don't.

Mark

What kind of patterns are we talking about?

Mimi

Small things, mostly. The way someone uses commas instead of periods. Whether they spell a word correctly once and then misspell it later. The ratio of passive to active voice. Whether they use academic language naturally or seem to be performing it. These habits are hard to fake consistently across multiple documents.

Mark

The second note claims she died. Can they verify that?

Mimi

No. Authorities said they cannot verify her death. The note itself is interesting because the writer uses the word "perished" and talks about her in the third person—almost as if deflecting responsibility. A linguist would say the writer is dehumanizing her, which tells you something about their psychology.

Mark

Is it likely they'll actually catch someone this way?

Mimi

Experts are skeptical. Six months is a long time for a lead to go cold. But it's happened before. The Unabomber was caught because his brother recognized his writing in a published manifesto. So it's not impossible—just unlikely.

  • Six months of investigation have produced almost no leads in the kidnapping of an elderly woman with no obvious motive, leaving authorities with little left to try but the language of the kidnappers themselves.
  • The two ransom notes — one demanding millions in Bitcoin, one claiming Nancy Guthrie died shortly after her abduction — represent the only direct communication from those responsible, and their authenticity and meaning remain unverified.
  • Forensic linguist William Eggington identified telltale micro-patterns in the notes: passive voice constructions, comma splices, a misspelled word that appeared correctly once and incorrectly again, all pointing to a single author with at least some formal education.
  • Experts caution that building an identification from so few words, after so much time, is a long shot — the Unabomber case succeeded because a brother recognized a voice, not because analysts found one on their own.
  • Savannah Guthrie made a direct public plea hours after the notes were released, asking anyone who recognizes the writing style to come forward, as the family's hope now rests on a stranger's memory of a familiar phrase or habit of punctuation.

Six months after 84-year-old Nancy Guthrie was abducted from her Arizona home, investigators in Pima County released two ransom notes to the public, hoping that language itself might accomplish what conventional detective work could not. The notes — one demanding Bitcoin, one claiming she had died — were offered not merely as evidence but as a kind of appeal to collective memory: somewhere, someone may recognize the particular architecture of these sentences, the rhythm of these errors, the voice behind the words. It is an ancient human intuition, now dressed in the formal methods of forensic linguistics, that each of us carries a signature in the way we speak and write — and that no disguise is ever quite complete.

Six months after Nancy Guthrie, 84, vanished from her Arizona home in January, police in Pima County made a deliberate choice: release the ransom notes. Two brief, typed messages — one demanding millions in Bitcoin, one claiming she had died — were put before the public in the hope that someone, somewhere, might recognize the voice behind them. The family of Guthrie, whose daughter is television presenter Savannah Guthrie, had endured months of investigation with little to show for it.

Forensic linguist William Eggington, a retired professor from Brigham Young University, explained the theory to the BBC. Every person carries an idiolect — a word print as distinctive as a fingerprint — built from sentence structure, word choice, spelling habits, and punctuation. The first note, which arrived at a local television station on February 2nd, opened formally and leaned heavily on passive constructions. The writer spelled "received" correctly once, then misspelled it moments later — a small but telling inconsistency. A second note arrived four days later, its tone colder, its language oddly academic: "She perished shortly after she was taken. She is buried in nature now." Eggington noted the dehumanizing register, the deflection of blame, and concluded both notes were written by the same hand — linked by repeated micro-patterns, including a habit of using commas where periods belonged.

Yet experts were measured in their optimism. Historian Jeffrey Adler acknowledged that identifying a suspect from ransom notes alone, after six months, "seems like a stretch." The most famous precedent — the Unabomber's identification in 1996 — succeeded not because analysts cracked the code in isolation, but because a brother recognized his sibling's voice in a published manifesto and came forward.

That is precisely what the Guthrie family is now asking for. Savannah Guthrie addressed reporters directly: "We are desperate. Someone knows something. Someone recognizes the writing." The appeal was not to science alone, but to the older, more intimate human capacity to hear a familiar voice in an unfamiliar place — and to act on it.

Six months to the day after Nancy Guthrie vanished from her Arizona home in January, police made a calculated decision: release the ransom notes. Two of them. The first demanded millions in Bitcoin. The second claimed she was dead. On Friday, authorities in Pima County hoped that by putting these brief, typed messages into public view, someone—a friend, a colleague, a neighbor—would recognize something in the way the words were arranged, the way they were spelled, the particular rhythm of their construction. Someone might say: I know that voice.

Guthrie was 84 when she disappeared. Her daughter is Savannah Guthrie, the television news presenter. The case had generated months of investigation with little to show for it—few leads, fewer suspects. A kidnapping of an elderly woman with no obvious motive is not the kind of crime that typically floods police tip lines. So investigators turned to an older tool: the analysis of language itself.

William Eggington, a retired linguistics professor from Brigham Young University now working as a forensic consultant, explained the premise to the BBC. Every person carries what linguists call an idiolect—a word print, as distinctive as a fingerprint. The way someone constructs a sentence, the words they choose, their habits of punctuation and spelling—these things accumulate into a pattern that is, in theory, recognizable. But Eggington was careful to add a caveat: investigators must maintain scientific skepticism, especially when working with so few words. And they must account for the possibility that a writer might be deliberately disguising their natural voice.

The first note arrived at a local television station on February 2nd. It began formally: "Hello Savannah, we have your mother Nancy. She is safe but scared." The heavy use of passive voice—"she will be held," "she will be released"—and the if-then sentence construction suggested someone with at least a high school education, possibly some college. But then came a telling detail. The writer spelled "received" correctly once, then misspelled it as "recieved" later in the same note. This suggested either carelessness or a lack of close attention to editing. The person was not particularly attuned to the proper spelling of the word.

Four days later, a second note arrived. The tone shifted. "We did not fully grasp the seriousness of her physical condition," it read. "She perished shortly after she was taken. We believe it was heart related. She is buried in nature now." Here, Eggington observed, the writer was employing what he called dehumanizing language—referring to Nancy in the third person, deflecting blame for her death onto her own body. The phrase "buried in nature" was distinctive, academic in tone, possibly deliberate obfuscation. Yet the stilted quality of the language might itself be a disguise, an attempt to sound like someone the writer is not.

Both notes, Eggington concluded, were written by the same person. The evidence lay in small, repeated habits: the use of commas instead of periods to separate thoughts that should have been two sentences. These micro-patterns are what investigators would use to build a profile of the writer—and later, if a suspect emerged, to compare against known samples of their handwriting or typing.

But six months is a long time. Jeffrey Adler, a historian of American crime at the University of Florida, acknowledged that identifying a suspect from ransom notes alone "seems like a stretch" at this point. Kidnapping itself is not a common crime. Most involve custody disputes. The historical precedents—the Lindbergh baby in the 1930s, Frank Sinatra's son in the 1960s—involved kidnappers with clear financial motives and, often, connections to the family. There was one notable exception: Theodore Kaczynski, the Unabomber, was identified in 1996 when his brother recognized his writing in the published manifesto and came forward.

Savannah Guthrie spoke to reporters hours after the notes were released. "We are desperate," she said. "We need someone to come forward. Someone knows something. Someone suspects something. Someone recognizes the writing in the ransom demand notes." The appeal was direct, almost pleading. Six months of silence had yielded nothing. Now the family was betting that the peculiar architecture of a stranger's prose—the way they built sentences, the words they chose, the errors they made—might be the thing that finally broke the case open.

It's built upon the premise that we each carry an idiolect, or a word print, of our own that distinguishes our language from others.
— William Eggington, forensic linguistics consultant
We are desperate. We need someone to come forward. Someone knows something.
— Savannah Guthrie, Nancy Guthrie's daughter
Contact Us FAQ