Nancy Guthrie: Ring Camera YANKED OFF – But FBI Found What Suspect Didn’t Know About

On the night of January 31st, 2026, someone approached Nancy Guthri’s front door.

They wore a mask.

They moved with calculated precision, and they knew they were being watched.

The Ring camera mounted beside the entrance captured their image for exactly 4 seconds.

A dark figure standing motionless, face completely obscured, and then in one swift motion, the suspect reached up and yanked the camera clean off the wall.

The feed went black instantly.

The recording stopped.

And in that moment, standing in the darkness of Nancy Guthri’s front porch, this person believed they had won.

They believed they had erased the evidence.

They believed no one would ever identify them.

They were catastrophically wrong.

Because what this suspect didn’t know, what they couldn’t possibly have anticipated.

Off was that the FBI wasn’t relying on just one camera.

They had already identified six separate surveillance systems that captured this person’s movements.

Six different angles, six different timestamps, six pieces of evidence documenting a surveillance pattern that stretched back three full weeks before Nancy disappeared.

The suspect thought yanking that ring camera off the wall would save them.

Instead, it became the single biggest mistake they ever made because that act of desperation told investigators everything they needed to know.

It told them the suspect understood surveillance technology.

It told them this person knew they’d been caught on camera.

It told them this wasn’t a random crime committed by some desperate opportunist.

This was planned.

This was methodical.

And this person had been watching Nancy Guthri’s home for weeks.

But while they were watching Nancy, six cameras were watching them, recording their movements, documenting their reconnaissance visits, capturing evidence they never knew existed.

And now the FBI has all of it.

Before we continue, if you’ve been following the Nancy Guthrie case and you want to understand how surveillance footage is about to crack this investigation wide open, hit subscribe and turn on notifications.

Because at Crime Uncovered, we don’t just report what’s happening.

We show you how investigators are building cases that bring people home.

And in NY’s case, that evidence is mounting.

Nancy Guthrie is 84 years old.

She vanished from her Tucson home on the night of January 31st.

Her daughter, Savannah Guthrie, co-anchor of NBC’s Today Show, and received the devastating phone call the next morning from her sister, Annie.

Mom’s missing.

Those two words launched one of the most intensive missing persons investigations Arizona has seen in decades.

The FBI immediately joined forces with the Puma County Sheriff’s Department.

A task force of more than 20 investigators began working around the clock.

Search teams combed miles of desert terrain.

Divers searched bodies of water.

K-9 units tracked sense through rugged landscape.

But as hours turned into days, as days turned into weeks, the investigation shifted focus.

This wasn’t a case of an elderly woman wandering off.

Nancy has severe mobility issues that make walking more than a few feet extremely difficult.

This was an abduction and the evidence suggested it had been planned meticulously.

The Ring camera footage became the cornerstone of the public investigation.

On February 10th, exactly 9 days after Nancy disappeared, the FBI made a critical decision.

They released a still image from that doorbell camera showing the masked suspect.

The photograph went viral immediately.

National news networks broadcast it continuously.

Social media platforms exploded with shares and comments.

Billboards across Arizona displayed the image alongside please for information.

Law enforcement anticipated a flood of tips and they got them.

Hundreds poured in during the first 72 hours alone.

But as FBI analysts dug deeper into the technical aspects of that footage, as they examined metadata and cross-referenced timestamps with other evidence, they made a discovery that fundamentally changed the entire investigation.

The image that had been released to the public, the one everyone assumed captured the suspect on the night of the abduction, might not have been from January 31st at all.

It might have been from weeks earlier.

And that revelation didn’t just add another layer to the case.

It completely transformed how investigators understood what they were dealing with.

Because if the suspect had been to NY’s house before, if they’d been caught on camera during an earlier visit, it meant this crime wasn’t opportunistic.

It meant someone had been watching Nancy for a very long time.

Sheriff Chris Nanos confirmed this theory in a carefully worded statement.

He acknowledged that investigators believe the Ring camera image may have been captured on an earlier date, most likely in mid January.

He wouldn’t provide specific details about why they believe this or what led them to that conclusion, but he did say something significant.

He said investigators are now seeking surveillance footage from the neighborhood for two very specific dates.

Dates that initially seemed random to residents, but that now appeared to be critical pieces of the timeline.

Those dates are January 11th and January 24th, 3 weeks before the abduction, and then again one week before.

two reconnaissance visits that prove this crime was planned with military precision.

This is textbook surveillance behavior.

Intelligence agencies teach this methodology.

Military special operations units drill these tactics.

And criminals who plan highstakes crimes use the same principles.

You don’t just show up on the night of the crime and hope everything works out.

You scout the location first.

You observe patterns.

You identify cameras and security systems.

You note which houses have dogs, which neighbors are home during certain hours, which streets have the most traffic, and which are completely empty late at night.

You learn everything you can, and then you come back to verify nothing has changed.

That’s exactly what happened during those reconnaissance visits.

The suspect was learning, timing, planning, making sure every detail was perfect.

But here’s the critical mistake this suspect made.

They assumed the cameras they could see were the only cameras that existed.

They focused on the obvious Ring doorbell at the front entrance.

They probably noticed any visible security cameras mounted under the eaves or above the garage, but they missed the others.

And those hidden cameras, those less obvious surveillance systems, captured everything.

Let me walk you through what investigators found.

Because when the FBI started pulling surveillance footage from a 5b block radius around NY’s home when they began the painstaking process of reviewing hundreds of hours of video, they discovered something remarkable.

This suspect had been caught on camera multiple times, not just once, not just twice, but repeatedly.

And each camera captured a different angle, a different perspective, a different piece of the puzzle.

When you put them all together, you don’t just see a crime, you see a complete operational plan unfolding across 3 weeks.

Now, camera one is the Ring doorbell at NY’s front door.

Everyone knows about this camera.

It’s the one that captured the iconic image of the masked suspect, the one that was violently yanked off the wall.

But understanding how Ring cameras work is crucial to understanding why that act of aggression was so feudal.

Ring doorbells don’t store footage locally on the device itself.

They stream video to cloud servers in real time.

The moment that camera captures an image, that image is already being transmitted over Wi-Fi to Amazon servers where it’s encrypted and stored.

Ripping the camera off the wall stops future recording, but it does absolutely nothing to erase what’s already been captured.

The suspect thought they were destroying evidence.

They were actually confirming it existed.

Camera 2 was mounted on a wooden fence at the rear of NY’s property.

This camera isn’t obvious if you’re approaching from the street.

It’s angled toward the back of the house, focused specifically on the rear entrance and the back patio area.

The suspect either didn’t see this camera during their reconnaissance visits or they saw it but didn’t think it mattered because they planned to enter through the front.

Either way, it was recording.

And on the morning Nancy disappeared, when family members arrived at the house and found multiple back doors propped wide open, investigators immediately thought of this camera.

If the suspect used those back doors at any point during the abduction, if they entered through the rear or exited that way or propped those doors open as part of their plan, camera 2 may have captured it all.

Camera 3 monitors the driveway and the front of the garage.

According to law enforcement sources who spoke to reporters covering this case, this camera has been recording continuously for months.

It captured normal daily activity.

NY’s family coming and going.

Landscaping crews arriving on their regular schedule, pool maintenance workers, mail carriers, delivery drivers, everything you’d expect to see at a residence in an upscale neighborhood.

But when investigators started reviewing footage from specific dates when they began looking for anomalies, they found them.

[clears throat] Vehicles that didn’t belong.

Cars driving past slowly, multiple times in a single night.

Vehicles stopping briefly near the property before moving on.

And some of those vehicles appeared on more than one date.

The same car showing up during the first reconnaissance visit, then appearing again during the second visit, then potentially showing up on the night of the abduction.

That’s not coincidence, that’s a pattern.

Camera 4 belongs to a neighbor two houses down from NY’s property.

It’s another Ring doorbell.

The camera faces the neighbor’s front door, but the field of view is wide enough to capture part of the street.

And on at least one night in January, this camera recorded something significant.

a figure walking past on the sidewalk, moving slowly, looking toward NY’s house.

The timestamp places this sighting during one of the known reconnaissance dates, and while the image quality may not be sharp enough for facial recognition, it documents the suspect’s presence in the neighborhood.

It proves they were there.

It proves they were watching.

And when combined with other evidence, it helps build an irrefutable timeline.

Camera 5 is a traffic camera positioned at an intersection approximately three blocks from NY’s residence.

Traffic cameras aren’t designed to solve kidnapping cases.

They’re installed to monitor traffic flow, enforce red light violations, and provide realtime data for traffic management systems, but they record continuously.

Every vehicle that passes through that intersection gets captured on video.

And when FBI agents pulled footage from this camera for the dates they were investigating, they discovered something that changed everything.

The same dark-colored sedan appearing six separate times across 3 weeks.

Not once, not twice, six times.

Different dates, but the same late evening time frame when traffic is minimal.

And every single time that vehicle was traveling in the direction of NY’s neighborhood.

Six visits, six timestamps, six pieces of evidence documenting a pattern of surveillance that proves premeditation beyond any doubt.

If investigators can trace that license plate and identify the owner, this case is solved.

Camera 6 is mounted on the exterior of a commercial building about two blocks from NY’s property.

The business installed the camera to monitor their parking lot and deter breakins, but the camera’s viewing angle extends beyond the parking lot.

It captures a section of the adjacent street.

And according to sources familiar with the investigation, this camera may have recorded a vehicle leaving the area during the early morning hours of February 1st, the time frame when Nancy was taken.

If forensic video analysts can enhance that footage, if they can extract a clear image of the license plate or identify the make and model with certainty, that vehicle becomes a critical piece of evidence.

Six cameras, six different vantage points, six opportunities to capture the suspect’s movements.

And the suspect knew about exactly one of them.

The Ring doorbell they ripped off the wall.

They had no idea about the other five.

No idea their reconnaissance visits were being documented.

No idea their vehicle was being recorded by traffic cameras six separate times.

No idea that neighbors had surveillance systems with overlapping fields of view.

And now the FBI has it all.

They’re analyzing every frame.

They’re enhancing images.

They’re tracking vehicles.

They’re building a minute-by-minute timeline of the suspect’s presence in that neighborhood across 3 weeks.

And somewhere in all that data is the evidence that’s going to identify who did this.

Now, let’s talk about Cameron Guthrie because his role in this investigation is more significant than most people realize.

Cameron is Savannah’s brother.

He’s also a highly trained military intelligence officer and fighter pilot.

He spent years in positions where recognizing patterns, identifying threats, and understanding operational planning was literally his job.

And when Savannah called him on the morning of February 1st, frantically trying to make sense of what had happened to their mother, Cameron didn’t need hours of deliberation to understand what they were dealing with.

He knew immediately.

Savannah described the scene to him.

The back doors propped open, the Ring camera yanked off the wall, blood on the front doorstep, their mother gone without her phone, without her medication, without her shoes, wearing only pajamas.

Most people hearing these details would be confused, frightened, overwhelmed.

But Cameron’s military training kicked in.

He assessed the information like he would assess an intelligence briefing.

And his conclusion was instant and definitive.

He told Savannah, “I think she’s been kidnapped for ransom.

” Savannah was shocked.

She asked why he would think that.

Why would anyone kidnap their elderly mother? What would make him jump to that conclusion so quickly? But Cameron saw what others couldn’t see.

He recognized the hallmarks of a planned operation.

The disabled camera showed operational security awareness.

Only the propped door suggested a deliberate entry or exit route.

The complete absence of NY’s personal items indicated she’d been taken by force with no time to gather anything.

And the fact that nothing else in the house appeared disturbed suggested this wasn’t a burglary gone wrong.

This was a targeted abduction.

[clears throat] Someone had come specifically for Nancy Guthrie and the most logical motive given Savannah’s high profile as a national television anchor was ransom.

That assessment proved correct.

Within days, ransom notes started arriving.

Multiple demands sent to various media outlets.

But as Savannah revealed in her recent interview with Hodok, most of those notes were fake.

Cruel hoaxes sent by opportunists trying to exploit the family’s tragedy.

The family knew this because the notes were vague.

They contained no specific details, no information that would prove the sender actually had Nancy or knew anything about what happened to her.

But two notes were different.

Two notes that the family received directly.

And those two notes contained something the others didn’t.

Inside information.

Savannah said these notes included details about things inside NY’s house and things outside NY’s house.

Information that only someone who had been on the property who had conducted extensive surveillance would know.

What kind of information? We don’t know the specifics because the family and law enforcement are keeping those details confidential, but we can make educated guesses based on how surveillance operations work.

Inside information could include the layout of the home, the number of rooms, the color scheme, the type of flooring, the placement of furniture, descriptions of specific objects that would only be visible to someone who’d been inside or who’d looked through windows at night when lights were on.

It could mention family photographs on the walls, a particular piece of artwork, the television setup, kitchen appliances, anything that proves the writer had visual access to the interior.

Outside, information could describe the property layout, the driveway configuration, the location of the garage, the fence line, the landscaping, the placement of security cameras, the type of doors, the material of the front porch, details about the back patio, the pool area, anything that proves the writer had spent time studying the exterior.

And here’s what that tells us.

The person who sent those ransom notes had conducted the same kind of surveillance that the cameras captured.

They’d been to NY’s property during those reconnaissance visits.

They’d observed it carefully.

They’d taken mental notes or maybe even photographs.

They knew the house intimately.

And that knowledge came from weeks of planning.

This is why Cameron’s military intelligence background matters because he understands how these operations work.

He knows that kidnappings for ransom, especially targeted abductions of family members of wealthy or high-profile individuals, aren’t spontaneous crimes.

They’re planned sometimes for months.

The perpetrators study the target.

They learn routines.

They identify vulnerabilities.

They time their approach.

They plan escape routes.

They prepare staging areas.

And they gather enough intelligence to prove they have the victim when it’s time to make ransom demands.

Cameron saw all of this in the evidence at NY’s house, and he knew exactly what investigators should be looking for.

Now, let’s talk about construction workers because this angle has become a major focus of the FBI’s investigation.

Brian Enton reported that FBI agents returned to NY’s neighborhood multiple times in recent weeks, asking residents about construction activity.

Specifically, they want to know about workers who were in the area during January.

Which properties had active construction projects? Which companies were contracted? Who were the individual workers? What vehicles did they drive? When were they on site? These are detailed, specific questions.

And they tell us the FBI has a reason to believe someone connected to construction work in that neighborhood may be involved.

This makes perfect tactical sense.

If you need to conduct surveillance on a target without raising suspicion, you need a cover story.

You need a legitimate reason to be in the area.

And construction work provides the perfect cover.

The Catalina Foothills is an affluent neighborhood.

Homes are constantly being renovated, expanded, or completely rebuilt.

That means there are construction crews, landscaping teams, contractors, and subcontractors working throughout the area on any given day.

These workers drive trucks.

They wear work clothes and carry tools.

They walk around properties to assess jobs, deliver materials, or take measurements.

And nobody questions their presence because they’re expected to be there.

If you wanted to watch Nancy Guthri’s home without being noticed, parking near an active construction site would be brilliant.

You could sit in a work truck for hours and nobody would think twice about it.

You could walk down the street carrying a toolbox and blend in completely.

You could even approach neighboring properties claiming to be checking on work or looking for an address.

And all the while you’d be gathering intelligence, observing routines, timing when people come and go, checking sight lines, identifying cameras, planning.

The FBI is now working to compile a comprehensive list of everyone who was working construction in the Catalina foothills during January.

They’re requesting employee rosters from general contractors.

They’re running background checks on subcontractors.

They’re documenting which companies had active projects within a half mile radius of NY’s home.

And they’re cross- refferencing all of that information with the surveillance footage they’ve collected.

If someone who was legitimately working a construction job in that area also shows up on camera near NY’s house during evening or nighttime hours when work wasn’t happening, that person becomes a priority suspect.

And if that person has any criminal history involving property crimes, burglary, kidnapping, or associations with organized crime, they move to the top of the list.

There’s another element investigators are examining closely, a vacant property near NY’s residence.

FBI agents have specifically asked neighbors about a home that was vacated shortly before NY’s disappearance.

They want to know who had access to that property, whether anyone was seen entering or leaving, whether any vehicles were parked there at unusual hours.

A vacant property is tactically valuable for several reasons.

It provides a staging area where you can park a vehicle without raising questions.

It offers a vantage point for observing the target from a distance.

It’s a place where you can store equipment or change clothes before and after the operation.

And it’s a location where you might leave forensic evidence, tire tracks, footprints, DNA that investigators can collect and analyze.

If the suspect used that vacant property as a base of operations, there will be evidence.

Maybe surveillance footage from neighboring homes captured someone entering the property on dates they shouldn’t have been there.

Maybe forensic teams can find biological samples left behind.

Maybe cell phone tower data can place someone’s phone at that location repeatedly during the surveillance period.

Real estate records will show who owns the property and who had legal access.

Investigators can interview real estate agents, property managers, utility workers, anyone who might have seen someone there.

And if they find a connection between that property and the suspect, it becomes another piece of the puzzle.

Now, let’s discuss the DNA evidence because this could be the scientific breakthrough that identifies the suspect.

Sheriff Chris Nanos revealed that DNA samples collected from NY’s home are being analyzed by two separate laboratories.

This is highly significant.

When law enforcement sends evidence to multiple labs, it usually indicates one of two scenarios.

Either the sample is degraded or contaminated and requires specialized expertise to analyze or it’s a mixed sample containing genetic material from multiple people that needs to be separated and identified individually.

Mixed DNA is particularly challenging.

You have to determine which genetic profiles belong to people who had legitimate access to the residents family members, friends, service workers, and which profile belongs to the suspect.

It’s a complex process that requires advanced techniques and careful analysis.

The involvement of a second laboratory suggests investigators may be pursuing genetic genealogy.

This is the same methodology that identified the Golden State Killer after he evaded capture for four decades.

It works by uploading crime scene DNA to public genealogy databases like GED Match or Family Tree DNA.

The system searches for partial matches, not identical matches, but people who share segments of DNA with the unknown suspect.

These are typically distant relatives, third cousins, fourth cousins, people who share a common ancestor from several generations back.

When a match is found, genetic genealogologists construct family trees.

They work forward through generations, identifying descendants, eliminating branches that don’t fit the suspect profile, and eventually narrowing down to a manageable list of potential suspects.

Then traditional investigative work takes over.

Investigators conduct surveillance on the individuals identified through genetic genealogy.

They wait for opportunities to collect discarded DNA samples, earning a coffee cup thrown in a public trash can, a cigarette butt dropped on the sidewalk, a napkin left at a restaurant, anything the person has touched and abandoned.

That DNA is then compared directly to the crime scene sample.

When it matches, you have your suspect, and the evidence is absolutely conclusive.

CC Moore is one of the foremost genetic genealogologists in the country.

She’s personally solved over 200 cold cases using these techniques.

And she said in a recent podcast interview that modern DNA technology has become extraordinarily sensitive.

She specifically stated, “We can solve these cases now with just a rootless hair.

That level of sensitivity means even microscopic biological traces can produce viable DNA profiles.

A single skin cell, a bead of sweat, a microscopic hair fragment.

If the suspect left any biological material at NY’s residence, and they almost certainly did because it’s virtually impossible to enter someone’s home without leaving some trace, that DNA is now being processed.

It’s being uploaded to databases.

It’s being compared to millions of genetic profiles, and it could produce a name.

But genetic genealogy takes time.

The initial DNA extraction and profiling might take several weeks.

Uploading to databases and waiting for matches can take additional weeks.

Building comprehensive family trees requires genealogologists to access birth records, marriage certificates, death records, census data, military records, and immigration documents spanning multiple generations.

Then investigators have to locate living descendants, conduct surveillance, and collect comparison samples.

The entire process can take months, but it works.

And when it produces results, those results are scientifically irrefutable.

The question is whether Nancy has that kind of time.

She’s 84 years old.

She has a serious heart condition that requires daily medication to regulate her pacemaker.

Without that medication, her heart rhythm could become dangerously irregular.

She could experience cardiac events and she was taken without any of her medical supplies without her phone to call for help, without shoes to protect her feet, wearing only thin pajamas.

For 55 days now, she’s been missing.

And every medical professional who’s been asked about her prognosis says the same thing.

Without her medication, without her regular care, the likelihood of survival decreases dramatically with each passing day.

This creates terrible urgency for investigators.

They’re not just trying to solve a kidnapping.

They’re racing against time to find Nancy alive.

And they know that every hour matters.

This is why the FBI has dedicated such enormous resources to this case.

It’s why they’re pulling surveillance footage from dozens of cameras across weeks of time.

It’s why they’re running DNA through multiple labs.

It’s why they’re conducting raids and seizing phones and interviewing every construction worker who was in that neighborhood.

Because somewhere in all that evidence is the key to finding Nancy Guthrie.

The two raids conducted in midFebruary remain mysterious.

Search warrants were executed at two separate locations.

One was a residence in Rio Rico, a town near the Mexican border where a man named Carlos was detained and had his phone confiscated.

The other was a home located approximately 2 mi from NY’s residence.

Another man was detained there and his phone was also seized.

Neither individual has been charged with any crime related to NY’s disappearance.

The search warrants remain under court seal, so we don’t know what probable cause led investigators to these specific people.

But former FBI agent Moren O’Connell offered insight based on her decades of experience with similar investigations.

She said the most probable explanation is that these individuals vehicles were identified on surveillance footage.

Maybe their cars were recorded driving through NY’s neighborhood during critical time periods.

Maybe their license plates were captured by traffic cameras or residential security systems.

Why? Maybe their vehicles match descriptions provided by witnesses.

Whatever the reason, the FBI wanted their phones.

Because modern smartphones contain extraordinarily detailed records of their owner’s activities.

GPS data that shows everywhere the phone has been, sometimes with accuracy down to a few meters, call logs showing who the person contacted and when.

Text messages that might reveal planning or communications with accompllices.

Photos that might show surveillance images of NY’s property.

app data that could indicate internet searches related to kidnapping or ransom demands.

All of that information is now being analyzed by FBI digital forensics specialists.

One detail about these raids is particularly intriguing.

One of the men whose home was searched had recently purchased a Range Rover, saying the vehicle was acquired for approximately $17,400 just 1 to2 weeks before Nancy was abducted.

That timing raises obvious questions.

Why purchase a vehicle immediately before a kidnapping? Is it mere coincidence? Or was this a vehicle obtained specifically for the crime? A vehicle that couldn’t be connected to the suspect’s normal daily routine? A vehicle purchased with cash to avoid creating a paper trail? If that Range Rover appears on surveillance footage near NY’s home, if it shows up on multiple cameras across multiple dates, it transforms from a suspicious purchase into material evidence.

But again, no charges have been filed.

These men haven’t been publicly cleared either.

The investigation continues.

Former FBI agent Jennifer Coffundafer has been following this case closely and providing analysis through her podcast and social media.

She recently posted that the Nancy Guthrie investigation is red-hot behind the scenes.

She emphasized that just because the public doesn’t see arrests doesn’t mean the case has stalled.

She wrote, “Investigators are drinking from a fire hose with more investigative leads than most cases ever have.

” She noted that NY’s case is active in every category that matters.

They have surveillance footage still being analyzed.

They have DNA evidence being processed.

They have digital forensics examining seized phones.

They have witness interviews ongoing.

They have tips from the public still coming in.

All of this work is happening simultaneously.

and all of it is pointing toward answers.

The person who yanked that ring camera off Nancy Guthri’s wall made a catastrophic miscalculation.

They thought one camera was the only threat.

They didn’t know about the five others.

They didn’t anticipate the traffic cameras would document their vehicle six separate times.

They never considered that neighbors doorbell cameras would capture their reconnaissance walks.

They assumed their careful planning made them invisible.

But every move was recorded.

Every visit was documented, and now the FBI has a complete timeline spanning 3 weeks showing exactly how this crime was planned and executed.

The suspect thought they were erasing evidence when they ripped that camera down.

All they did was confirm they understood the danger it represented.

And that confirmation told investigators everything they needed to know about where to look next.

Nancy Guthri’s family is offering a $1 million reward for information leading to her safe return.

The FBI has added an additional $100,000.

That’s $1.1 million for information that brings Nancy home.

If you live in the Catalina Foothills area, if you have surveillance cameras, if you haven’t already provided footage to investigators, please review your recordings.

If you see anything unusual, any vehicle that doesn’t belong, any person walking past at odd hours, contact the FBI immediately.

The number is 1 800 call FBI.

That’s 1 8002255324.

If you know someone who worked construction in that neighborhood during January, someone who acted strangely before or after Nancy disappeared, someone who left town suddenly, someone who purchased a vehicle right before the abduction, call that number because someone out there knows something, someone saw something, and six cameras captured more than anyone realized.

Subscribe to Crime Uncovered for every update as this investigation develops.

Hit like if you believe these six cameras are going to solve this case and leave a comment.

Do you think the FBI already knows who did this? Because the cameras were watching the whole time and the suspect never knew just how much they revealed.