Nancy Guthrie latest: Sheriff says search expanded and announces follow up on 'new leads'

A tribute was put up outside Nancy Guthrie's home in Tucson, and the tribute continues to grow as the search for the abducted woman reached night nine.

The tribute featured lit candles, flowers, ribbons and uplifting messages and hearts painted on rocks and other items, according to video captured by Fox 10.

"Please pray. Bring her home," one message written on a rock reads.

"Dear Guthrie family, your neighbors stand with you," a sign placed in the tribute reads.

A former CIA agent said investigators are likely waiting for one "human error" that would allow them to crack the case of Nancy Guthrie's abduction.

Tim Roemer, who also served as the director of the Arizona Department of Homeland Security, was asked about the FBI’s efforts to track the abductors who reportedly sent ransom notes to newsrooms.

"The most important thing here is human error," Roemer told Fox 10. "I really think whoever is behind this and behind the email is going to make a mistake, not utilizing the right kinds of technology, and that one mistake is going to be what gets them caught."

Roemer also said that encryption can make digital investigations difficult, but that the presence of a physical crime scene at Guthrie's home in Arizona offers a significant advantage for authorities.

"In a normal cyber situation, breaking encryption, anything like that, is going to be difficult; it’s going to take time," Roemer said. "However, when you have a physical crime you have committed that you know is linked to the same thing, those are the clues and the mistakes that will lead to finding those responsible."

A former FBI official told Fox News Digital that Monday evening's Instagram plea by Savannah Guthrie reveals that authorities might believe the chances of finding her mother Nancy alive are dwindling. 

"That jumped out at me that she greeted, 'Hi there everyone,' instead of talking to the supposed kidnappers," said Jonny Grusing, who was a special agent with the Denver FBI for 25 years. 

"The plea was more toward, 'did you see anything, did you hear anything? Please come forward. Don't be afraid to come forward.'" 

He noted that a barrier faced by investigators is that tipsters often feel like reporting something they saw or heard is not important enough, or would waste investigators' time. 

Guthrie also said she believes her mother is still alive, and is still feeling the prayers of the public. The tactic of having Savannah speaking directly to the public to solicit tips is likely the result of having no suspects, and a fear that Nancy might be running out of time. 

"And it is a very personal plea," he said. "They're trying as best as they can to find that bystander who knows something or someone, and get that direct plea that will pull on your heartstrings, and say, 'you know what, screw feeling stupid or whatever else, I need to help this family even if it means I might not have right information.'"

"I think it sounds like they have been briefing [Savannah] about chances and likelihood that her mom's doing okay, because she did say [Nancy] somehow feels the thoughts and prayers" Grusing continued. "The wording of that I think is intentional as well. The numbers don't look good at this point for [Nancy] doing okay, so I think that's another plea to the public, where we have an individual who might still be around with us, and just not in a good state right now, and we need your information right away."

Anyone with information on Guthrie's whereabouts should contact 1-800-CALL-FBI. 

The FBI says it has not identified a suspect or person of interest in the disappearance of Nancy Guthrie after an alleged ransom deadline passed.

In a statement to Fox News Digital, an FBI spokesperson said agents have worked around the clock for more than a week and are not aware of any continued communication between the Guthrie family and suspected kidnappers.

“For more than a week, FBI agents, analysts, and professional staff have worked around the clock to reunite Nancy Guthrie with her family,” the spokesperson said.

"Additional personnel from FBI field offices nationwide remain deployed to Tucson, where the bureau is operating a 24-hour command post with crisis management experts, analysts, and investigative teams," the statement continued.

The FBI is urging the public to come forward with information.

“Someone has that one piece of information that can help us bring Nancy home,” the spokesperson said.

Anyone with information is asked to call 1-800-CALL-FBI.

The alleged Bitcoin account tied to the ransom note in Nancy Guthrie’s disappearance remains empty immediately after the Monday night deadline, TMZ’s Harvey Levin told CNN. 

The account mentioned in the first ransom note demanding $6 million did not reflect any deposits as the 5 p.m. deadline passed, Levin said. He also added any additional notes sent to local news stations throughout Tucson, Arizona may have not had the same Bitcoin account address. 

The first alleged ransom note received by TMZ allegedly said, “It is in the best interest of everyone to have this completed as soon as possible,” according to Levin, who called the tone of the note “braggadocious.”

A law enforcement expert is suggesting the facts surrounding Nancy Guthrie’s abduction indicate those involved did not initially plan for the case to gain such widespread attention and was most likely a home invasion that did not go according to plan. 

“The facts of what I see available to use right now are more in-line with a potential crime-gone-wrong,” Rob Chadwick, a retired FBI supervisory special agent, told the “Will Cain Show” on Monday. “It could’ve been targeted, could have been random – we don’t know. But we don’t see a traditional kidnapping or designed kidnapping for ransom.” 

Chadwick went on to point to the increased media attention surrounding Guthrie’s disappearance and how abductors typically do not want to create a high-interest, while adding the individuals involved in the ransom demands may have not been those who carried out the crime inside Nancy’s house. 

“If someone were truly invested in trying to recover money for this case, they’re going about it in a very, very different way.” 

TMZ's Harvey Levin says the most revealing clue in the Nancy Guthrie kidnapping may come down to a single sentence buried in the ransom note as the deadline looms.

Levin points to the promise that the kidnappers would bring Guthrie back to Tucson within 12 hours of receiving the money, language that strongly suggests she is not currently in the city. While that timeline could theoretically place the suspects far from Tucson, Levin believes they are likely much closer.

He notes the ransom messages were sent to local Tucson television stations rather than NBC News, where Savannah Guthrie works, a choice that indicates familiarity with the Tucson media market and a local connection.

Levin also says the note’s careful wording and structure suggest an intelligent and deliberate author, raising the possibility the suspect knew or knew of Nancy Guthrie, as investigators remain under growing pressure with no ransom deposited and no proof of life.

The two alleged ransom notes demanding the release of Nancy Guthrie, the 84-year-old mother of TODAY co-host Savannah Guthrie, sought two different payments tied to separate deadlines, according to reports.

The letter, which was sent to Arizona television stations KOLD and KGUN, outlined two separate demands, the outlet reported.

The first called for $4 million in bitcoin by Feb. 5. If that deadline was not met, the demand would increase to $6 million by Monday, sources said.

A source also told PEOPLE that as of 2:30 p.m. local time Monday, no payments had been made to the bitcoin account listed in the note

Savannah Guthrie appears visibly strained in her latest video plea, with a body language expert describing clear signs of “exasperation and desperation."

Body language expert Susan Constantine pointed out “deep inhales” and moments of “over-welling” emotion. Constantine told Fox News Digital Guthrie “remains strong in words and faith,” but added that “the deep signs” suggest she is “grasping to hang on hope.”

Constantine described the video as “off script and real,” contrasting it with other pleas that sounded “strategic and written for them.” She said Guthrie has been “out and center since the beginning” and “really doesn’t need them to get the message out,” calling her “known” and “the best one to get the message out.”

According to Constantine, the other siblings appeared as a backdrop and “were not comfortable speaking.” She said it was “an independent decision,” similar to how Guthrie’s brother released his own separate video. Constantine added that while the family is united, “they couldn’t be more different.”

In the video, Guthrie thanked supporters for their prayers and asked the public to report anything suspicious to law enforcement, saying, “We are at an hour of desperation, and we need your help.”

A group of women were seen outside Nancy Guthrie’s home in Tucson, Arizona, on Monday praying for the missing 84-year-old.

The three women stood holding hands, with their heads bowed.

Guthrie has been missing for more than a week, last seen by her family late last month.

Neighbors of Guthrie told Fox News on Feb. 6 they are “distraught” following her reported abduction from her Tucson home.

Described as a normally “private” and “serene” area, neighbors also highlighted the extreme seclusion and lack of security cameras around her home.

Authorities have said no arrests have been made and the search for Guthrie remains ongoing as investigators continue to follow up on leads.

Former DEA agent and Global Security Group CEO David Katz says investigators searching for Nancy Guthrie are likely focusing on digital evidence as the case continues, even though law enforcement has released few details about the steps being taken behind the scenes.

“Obviously I have a limited understanding of the investigative measures being undertaken because law enforcement is not going to release details of what they are doing in an active case,” Katz told Fox News Digital. He said standard canvassing efforts — including interviews with neighbors and reviews of nearby security cameras, red-light cameras and license plate readers — may not have produced significant breakthroughs.

Katz said cases like this often turn on cellphone analysis, pointing to past investigations where suspects were identified by unusual phone behavior near crime scenes.

“You would expect neighbors and family members to have phones that are in that area,” Katz said. “All of a sudden you see new, unrelated phones coming up. Those would be of interest. Phones that are moving at hours in the middle of the night when other phones would be stationary.”

Even attempts to avoid detection can leave a digital trail, Katz said.

“If you access the internet, you are leaving a record and a trail to follow,” he said. “Even if you left your phone home during the crime, it’s still possible you were using it beforehand while conducting surveillance. That’s how I think they’re going to solve this one.”

Fox News Digital Michael Ruiz contributed to this report.

Retired LAPD investigator Moses Castillo says continued silence and unanswered ransom demands in the case of 84-year-old Nancy Guthrie may be increasing pressure behind the scenes, potentially creating fractures among those connected to the crime.

“I do believe there’s at least one individual within that circle who’s not happy with how far this has gone — and maybe that person wants out,” Castillo said, calling the ongoing silence a factor that could be working against those responsible.

Castillo also questioned whether the individuals issuing ransom notes are the same people who carried out the abduction, suggesting that mounting pressure tied to the ransom demands could play a role in prompting someone to come forward.

President Donald Trump has been “closely following” the Guthrie investigation and is “receiving frequent updates,” White House press secretary Karoline Leavitt confirmed Monday.

Trump previously said he directed all federal law enforcement agencies to be at the disposal of local authorities in Arizona to assist with the search.

The president had told reporters aboard Air Force One Feb. 9 that the investigation was going “very well” and that he expected “answers coming up fairly soon.”

The word “celebrate” that Savannah Guthrie used in the family’s latest video plea to whomever kidnapped her mother, Nancy Guthrie, was intentional and may be instrumental in a peaceful negotiation for the return of the missing 84-year-old, retired FBI special agent Jason Pack told Fox News Digital on Monday.

Savannah Guthrie made the plea in a video the family posted to Instagram on Saturday.

“We beg you now to return our mother to us so that we can celebrate with her," Savannah Guthrie said, seated between her siblings, Annie Guthrie and Camron Guthrie.

“The word ‘celebrate’ stood out to me immediately," Pack said. "Savannah didn’t say ‘surrender her’ or ‘give her back.’ She said return her so we can ‘celebrate.’ That’s the language of resolution, not confrontation. In any negotiation, you want to offer the other party a way to see this ending positively and peacefully for them too. That’s exactly what the family is doing.”

Pack praised the Guthries for showing “extraordinary discipline under unimaginable grief and pressure” in each subsequent video message to the kidnappers.

“In four days, they moved from an emotional plea, to a proof-of-life demand, to a public offer to pay,” he said. “Every step was designed to keep the line of communication open and lower every possible barrier to Nancy’s safe return.”

He added that the family saying “we will pay” is a deliberate strategy to concede to the potential abductors that the family “is serious, that they’re not stalling, and that there is a path forward.”

Pack said that he remains encouraged as long as the lines of communication remain open, noting that the investigation has now entered what he called “the most critical window.”

“Even though it’s coming through unconventional channels, local and national media outlets rather than direct contact, the fact that someone is engaging means there is a thread to follow,” Pack said. “If they’re communicating, that’s a welcomed development. The goal now is to keep that thread from breaking.”

Fox News Digital's Julia Bonavita contributed to this report.

A Bitcoin account allegedly set up to collect a ransom for Nancy Guthrie remains empty as the deadline to make the transaction by 5 p.m. local time Monday ticks closer, TMZ reported.

TMZ reported that the publicly viewable account stands at $0 with no transactions recorded. The outlet previously reported that it had received a ransom note from the potential abductors of Nancy Guthrie.

Fox News Digital has not confirmed TMZ’s report about the balance of the Bitcoin account.

Local Tucson TV station KGUN 9 reported over the weekend that the alleged ransom demand was $6 million in Bitcoin. Shortly after posting a video of its report online, the station removed the post.

The Guthrie family released a video plea Saturday saying that they will pay, though they did not elaborate on the type of payment or how much.

According to an expert who spoke to Fox News Digital, a Bitcoin transaction, even one with a $6 million sum, would be quick and untraceable. 

"So the way the payment would work is just wallet to wallet, but the point of it is it wouldn't be tracked," he said. "You wouldn't be able to trace where my wallet came from, and you wouldn't be able to trace what wallet it was going to."

Even if the Guthries have never exchanged cryptocurrency before, they could open a wallet, deposit the money and send it with only a few clicks. 

"Click, click done," he said. "And you wouldn't know where it went, or you couldn't even check. A lot of times these people have different IP addresses being found in different places. So you'd be like, 'oh they were in Russia oh now, wait, they were in Florida, oh no, they're in Paris.' So you wouldn't really know."

Fox News Digital's Peter D'Abrosca contributed to this report.

The FBI is analyzing a trove of data collected from the homes of Nancy Guthrie and her neighbors in Tucson, Arizona, Fox News Senior Correspondent Alicia Acuna reports.

Fox News Digital reported that a security camera that was present on the exterior of Nancy Guthrie’s home as recently as Friday morning had been removed from its bracket on the wall by Monday as investigators continued their search of the property.

Even if these types of cameras don’t catch someone on the property, the FBI still can grab what’s known as “unseen data,” Acuna reports.

Even though home security cameras may not have notified neighbors about an occurrence, the technology may have still logged the ability to see it but just didn’t think it was big enough to ping the user’s app, according to Kurt "CyberGuy" Knutsson.

“Cameras facing the Guthrie house right now show very little activity, but I promise you there’s an enormous amount of activity going on on the digital side,” Knutsson said.

The Pima County Sheriff’s Department previously released a timeline showing Nancy Guthrie’s doorbell camera disconnected at 1:47 a.m. on Feb. 1, with motion detected at 2:12 a.m. and her pacemaker app disconnected at 2:28 a.m.

Officials clarified that the surveillance system only detected motion and did not record video, leaving open the possibility that an animal outside the home triggered the software.

Fox News Digital’s Madison Colombo contributed to this report

Josh Ritter, a criminal defense attorney and Fox News contributor, told “FOX & Friends” on Monday morning that paying the alleged Bitcoin ransom for Nancy Guthrie could help investigators track down the 84-year-old’s potential kidnappers.

Ritter said that a Bitcoin transaction “is not as secure as many people may think,” noting that authorities can track that information “way more than we may realize.”

“One interesting thing is that these wallets have a number, it's like an account number, and they can, they keep this information, if that account number has ever been used for any prior illegal activity and they can monitor that account number,” he said.

Ritter said the “difficult” part for those demanding the ransom will be converting the Bitcoin payment into usable currency.

“They've got a transfer that from Bitcoin into U.S. Dollars or whatever they plan on using it for,” Ritter said. “That transaction is also trackable as well.”

“So this is not something that even if the ransom is paid, that might be the best way to kind of smoke out these kidnappers,” he added.

The Guthrie family stated in a video plea on Saturday that they “will pay,” though did not specify what type of payment or how much.

Law enforcement was conducting a consent search at the home of Annie Guthrie, the daughter of Nancy Guthrie, when they returned to her home on Saturday night, NBC reported on Monday. 

Tom Winter, NBC News national law enforcement and intelligence correspondent, reported on “Today” that investigators were conducting additional searches to check if there was any potential evidence missed during previous searches. 

Nancy Guthrie disappeared from her home after family dropped her off following a family dinner at the home of her daughter Annie Guthrie and Annie’s husband, Tommaso Cioni, on Jan. 31. 

Winter reported that since authorities have yet to identify a suspect or person of interest, it appeared investigators’ focus is to “just start at the beginning and see if there’s anything here we can drive from it.” 

Law enforcement was previously seen at the home of Annie Guthrie, Nancy's daughter, for two and a half hours on Saturday evening. They were seen leaving at 10:30 p.m. local time after appearing to take photographs in the garage and inside another part of the home. 

At the time, Fox News Digital observed a deputy loading a white case into his vehicle, which he had carried inside earlier, along with what appeared to be a grocery-size brown bag. 

The Pima County Sheriff’s Department said in an update on Sunday that the investigation is ongoing, noting that follow-up searches continue at multiple locations. The department added that no suspects, persons of interest, or vehicles have been identified. 

Fox News Digital’s Michael Ruiz, Sarah Rumpf-Whitten and Alexandria Hernandez contributed to this report.

There are less than 24 hours to go until the next and final alleged ransom deadline connected to the disappearance of Nancy Guthrie.

As previously reported by Fox News Digital, authorities are investigating two alleged ransom notes tied to the case.

The first deadline, set for 5 p.m. Thursday, Feb. 5, already passed. A second deadline is reportedly set for 5 p.m. Monday, Feb. 9.

Officials have confirmed that news outlets, including TMZ and local Arizona stations, received potential ransom notes.

Authorities say the notes contained “sensitive information” that may have been known only to Nancy Guthrie or her alleged captors, though the full contents have not been released publicly.

TMZ founder Harvey Levin discussed one alleged ransom note his newsroom received on "Hannity" and said the message claimed Guthrie was “safe, but scared,”

The note reportedly demanded payment in Bitcoin.

Meanwhile, KGUN 9 in Tucson reported that it received a note demanding $6 million before 5 p.m. local time Monday and threatening Nancy Guthrie’s life if the family does not meet the deadline.

The station later removed the video of the report it had posted online.

Former hostage negotiator Dan O'Shea said on Sunday that the deadline approaching for a $6 million ransom in the case of Nancy Guthrie's abduction "doesn't mean the end of the story," saying he thinks it "would be the next chapter."

O'Shea made the comment during an appearance on Fox News' "Sunday Night in America" ahead of the ransom deadline of 5 p.m. on Monday.

"They don't even have a person of interest at this point, which makes it even harder," he said. "So this this evil right now is a ghost in the wind. And, you know, we're all waiting with bated breath, how it's going to turn out."

"With the deadline tomorrow approaching, we have to see next to how they're going to step up their game," O'Shea added. "But I would say this, we had proof of life and ransom demands and windows on multiple occasions by very hard groups, literally ISIS-type groups, but we got past those deadlines. So just the fact that there's a deadline tomorrow at five o'clock, that doesn't mean the end of the story. I just think it would be the the next chapter, frankly."