Investigators and forensic analysts believe the writing style visible in two ransom letters tied to the disappearance of 84-year-old Nancy Guthrie may hold the crucial evidence needed to identify the author and solve a case that has remained open since February.
Nancy Guthrie, whose daughter Savannah Guthrie co-hosts NBC’s “Today,” was taken from her residence in northern Tucson on February 1 by a masked intruder who was recorded on doorbell camera footage. Authorities released two ransom letters to the public on July 31, more than six months after the abduction. One letter made a demand for millions in bitcoin, while the other stated that Nancy Guthrie had “perished” and was “buried in nature.” No one has been publicly named as a suspect, and her location is still unknown.
Patterns That Point to One Author
Lisa Miller, who previously served as a detective and law enforcement executive with the Colorado Attorney General’s Office before retiring, conducted an examination of the two documents made public by the Pima County Sheriff’s Department. Her assessment found that both letters display a uniform voice with recurring linguistic characteristics.
Among the most striking features are comma splices, which occur when complete sentences are joined with commas rather than separated by periods. This construction shows up multiple times throughout both documents, creating a grammatical signature that Miller told Fox News Digital strongly indicates the same individual composed them.
The letters also exhibit unusual treatment of compound words. Terms like “smartwatch” and “floodlight” are written as two separate words instead of one. The expression “heart related” lacks the hyphen typically required. According to Miller, these are not isolated mistakes but ingrained habits that create a recognizable pattern.
Additional quirks include the simultaneous use of a dollar sign and “USD” when referring to the ransom demand, along with distinctive formatting of dates and times. Miller characterized these elements as further indicators of a personal writing style.
The Linguistic Fingerprint of Idiolect
Central to Miller’s interpretation is the notion of idiolect—the distinctive manner in which each individual uses language, shaped by their geographic origins, residential history, absorbed slang, and accumulated life experience.
The second letter’s vocabulary struck Miller as particularly telling. Choosing “perished” over “died” and describing the location as “buried in nature” suggests someone with a specific cultural or educational background, potentially influenced by religious instruction or exposure to literary language. Miller also pointed to another interpretation: such euphemistic language may indicate a psychological mechanism in which offenders downplay their actions, deflect responsibility, and avoid confronting the reality of harm they have inflicted.
Miller further noted that she does not believe the letters were generated by artificial intelligence. The presence of at least one typo and the irregular rhythm of the sentences stand in contrast to the smooth, uniform output typically associated with AI tools. Those imperfections, she argued, are themselves revealing.
Public Recognition as an Investigative Tool
The Pima County Sheriff’s Department is hoping someone who reads the notes will recognize the author’s “unique linguistic style.” Miller said this goal is realistic because idiolect operates below conscious control—people write the way they do without thinking about it, and those familiar with the writer may spot these markers even without understanding their significance.
Miller urged the public to reflect on whether anyone they know employs odd phrasing or habitual comma splices in correspondence, whether handwritten or electronic, as such recognizable traits could provide investigators with a breakthrough.
The decision to release the letters may have an additional strategic benefit rooted in criminal psychology. Miller explained that making the documents public applies stress to the author, which can lead to what she termed behavioral leakage—small shifts in conduct or mood that acquaintances might detect, even if they do not immediately understand the cause.
The Evidence Gathered So Far
A masked individual appeared on Nancy Guthrie’s doorstep in the early morning hours of February 1, captured on her doorbell camera before she was taken. The FBI released that footage publicly, and DNA evidence collected from the scene was forwarded to the FBI Laboratory for analysis. Despite these investigative leads, authorities have not publicly identified any suspects, and Nancy Guthrie remains missing.
Miller’s work suggests that the ransom letters—traditionally viewed as evidence of motive—may simultaneously reveal who they are. The grammatical traces woven throughout both documents, she contended, represent precisely the sort of recognizable detail that might trigger the tip law enforcement has been seeking.
