A dark stain on the front steps. In the harsh winter sun north of Tucson, that single detail has become a magnet for speculation about what happened in the middle of the night.

Nancy Guthrie, 84, the mother of NBC “TODAY” co-anchor Savannah Guthrie, vanished late Saturday night.

By the time family and authorities realized she had missed Sunday morning church—something loved ones say she simply didn’t do—investigators were no longer treating the home as a routine welfare check. They were treating it as a crime scene.

As social media churned out accusations and “inside information,” the Pima County Sheriff’s Department pushed back, calling portions of the online narrative false and irresponsible.

The agency says it is working closely with the Guthrie family and coordinating with the FBI, while cautioning the public against amplifying unverified claims.

Still, the known facts—along with what authorities have acknowledged without fully explaining—are enough to paint a disturbing picture: an elderly woman with serious medical needs, living alone; evidence consistent with an abduction; digital devices left behind; a camera question at the front door; and a substance that looks like blood on the steps.

NewsNation video shows what appears to be blood on the steps

In video shot by NewsNation outside Nancy Guthrie’s home near Tucson, reddish-brown stains can be seen on the front steps. At first glance, the amount looks like what might be left behind after a significant bloody nose or a deep abrasion. The Sheriff’s Department has not confirmed that the substance is blood or that it is directly connected to the disappearance.

What the sheriff has confirmed is this: investigators collected DNA evidence and submitted it to a lab. Authorities have not disclosed what the DNA sample was—blood or otherwise—but have stated that the DNA belongs to Nancy Guthrie.

That narrow confirmation has created a vacuum that others have tried to fill, often recklessly. Online posts have named relatives and spun elaborate theories. Investigators, meanwhile, appear to be trying to balance public transparency with the need to protect the integrity of the case.

Newly surfaced dispatch audio points to urgent medical risks

A newly circulated dispatch recording from February 1, when the missing-person call went out, includes details about Nancy Guthrie’s health: she has high blood pressure, a pacemaker, and cardiac issues.

Those details align with what the Pima County sheriff said publicly: Nancy is “incredibly sharp” mentally, but physically limited—someone who would not be able to walk even short distances alone. In this case, the medical backdrop is not just context. It is a time pressure.

A pacemaker, an Apple Watch, and a critical timestamp

According to a report from Fox News Digital, Nancy’s pacemaker was synced to her Apple Watch—and when deputies arrived, the watch was still on the charger near her bed. Her cell phone, the report says, was also found inside the home.

Fox News Digital further reported that the pacemaker last synced with the Apple Watch at around 2 a.m. Sunday. If that timestamp is accurate, it could be a technical marker suggesting when the watch—and potentially the phone—was separated from Nancy, or when the normal data flow stopped.

The sheriff has said investigators believe Nancy was taken against her will.

“She did not leave that home willingly,” the sheriff has stated in substance, describing the scene inside the house as consistent with a crime.

The last known sighting: dinner, a ride home, then silence

Law enforcement says Nancy was last seen Saturday night between roughly 9:30 and 9:45 p.m., when her daughter Annie—Savannah Guthrie’s older sister—dropped her off at her home after dinner. Nancy lived alone north of Tucson.

What happened next remains unclear. Deputies were called Sunday at approximately 12:15 p.m. after Nancy did not show up for church. Investigators have said family members were notified around 11 a.m. Sunday that she was missing.

From there, the case accelerated into a multi-agency search.

Ransom-note claims surface—authorities refuse to validate them

On Tuesday, TMZ reported it had received an email described as a ransom note demanding a specific, substantial amount of Bitcoin—millions of dollars—sent to a designated wallet address. TMZ said it verified the Bitcoin address was real and that the note contained a deadline and what it described as an “or else” element.

After TMZ’s report, other outlets, including local stations in Tucson, said they had received similar messages.

The Pima County Sheriff’s Department acknowledged the reports publicly, saying it was aware of the claims and that tips and leads were being routed directly to detectives coordinating with the FBI. The statement stopped short of confirming the notes were authentic—and it did not explicitly deny them.

By the following morning, the “TODAY” show reported the ransom-note claims were not substantiated.

Investigators and missing-person experts note that in high-profile cases, opportunists sometimes attempt to exploit families’ fear by sending fake ransom communications designed to force publicity and spark panic.

A missing doorbell camera raises a second trail of questions

The NewsNation footage also shows what appears to be a mounting point where a Ring-style doorbell camera could be installed, but the device itself is not visible. When asked directly whether a perpetrator removed the camera, the sheriff said he did not know and that the issue was being examined.

The absence matters because a functioning doorbell camera typically uploads footage to a cloud-based account. Authorities say they have Nancy’s phone, and the FBI has confirmed that agents are downloading and analyzing multiple cell phones, obtaining cell-tower information, conducting interviews, and providing technical and investigative support.

“We’re looking at this from every angle,” an FBI representative said, urging the public to come forward with information.

Podcast allegation names a “prime suspect”—sheriff blasts “false information”

The most explosive allegation to hit the public narrative came from journalist Ashley Banfield on her podcast “Drop Dead Serious.” Banfield claimed an anonymous law enforcement source close to the investigation told her that Nancy Guthrie’s son-in-law was a “prime suspect.”

Banfield also claimed the same source said the back door of Nancy’s home was found wide open, that blood was found inside the house, and that a vehicle belonging to Annie Guthrie had been impounded.

In response, the Pima County Sheriff’s Department issued a pointed statement rejecting the idea that a suspect or person of interest had been identified.

“At this point, investigators have not identified a suspect or person of interest in this case,” the department said. “Detectives continue to speak with anyone who may have had contact with Mrs. Guthrie. Detectives are working closely with the Guthrie family. While we appreciate the public’s concern, the sharing of unverified accusations or false information is irresponsible and does not assist the investigation. No suspect or person of interest has been identified at this time.”

Savannah Guthrie steps away from the spotlight and pleads for prayer

As the search moved beyond three days, Savannah Guthrie did not appear on “TODAY” at 30 Rock in New York. Reports also indicated she would not take part in NBC’s Olympic coverage in Italy, where opening ceremonies were scheduled for Friday.

She posted a message on Instagram to her 1.2 million followers: a simple graphic reading “Please pray,” followed by a longer caption asking for prayers for her mother.

“We believe in prayer,” she wrote, calling Nancy “our beloved mom” and a woman of deep conviction. She ended with a plea: “Bring her home.”

A close family—and an investigative question about access

Savannah Guthrie has been a co-anchor of “TODAY” since 2012. She grew up in Tucson, attended the University of Arizona, and has spoken publicly about being close with her mother and siblings. Nancy and Annie have appeared with Savannah on-air in the past, and Savannah has shared family photos publicly, including one taken after Christmas.

But in a case investigators believe involved an abduction from inside a home, detectives often begin with a stark, practical question: who had access?

Nancy lived alone, but her health conditions raise the possibility that caregivers, contractors, or other routine visitors may have known her schedule and vulnerabilities. Authorities have not publicly detailed who had keys or who routinely visited the property.

Time pressure: medication, physical limitations, and the “first 48 hours” reality

Officials have emphasized Nancy’s medical needs. The sheriff has said she required medication and that missing it could be life-threatening. By the time that warning became public, the search had already pushed beyond the most critical early window.

Missing-person investigators often describe the first 48 hours as the most important period to generate leads before evidence degrades and the trail cools. At the same time, law enforcement sometimes limits disclosures to avoid tipping off a suspect or contaminating witness accounts.

Private investigator Billy Lane, a former law enforcement professional with experience in technical forensics, has said that the home should remain the center of gravity for the investigation: whether there was forced entry, whether Nancy knew the person who came to the door, and what the physical evidence truly indicates.

Lane noted that the apparent blood on the steps, if connected, is not a massive volume—something that could be consistent with an abrasion in an elderly person with fragile skin. He also floated a possibility investigators sometimes consider in abduction cases: the blood might not belong only to the victim, but could also reflect a struggle. That remains speculative and unconfirmed.

How investigators may use technology: cell-tower dumps and license plate readers

Lane described the kind of digital work agencies often deploy in a case like this, including a “tower dump” to identify devices connected to nearby cell towers during the critical time window. He also pointed to license plate reader systems that can capture vehicles moving through defined corridors.

But he warned that an offender who planned carefully could avoid digital footprints—by leaving phones behind, using devices in airplane mode, or traveling in a vehicle designed to defeat automated plate detection.

Either way, he said, law enforcement typically keeps technical leads close, especially when there is still hope of a live recovery.

What the pacemaker and watch might really mean

Asked about the reported 2 a.m. sync time, Lane—while not a pacemaker specialist—approached it as an electronics question. He suggested that a loss of sync could reflect separation by distance rather than sophisticated tampering.

The bottom line, he said, is that investigators will be looking for the simplest explanation first: when and how Nancy became separated from her devices.

The unanswered question: why take an 84-year-old woman?

Beyond the evidence, the case remains unsettling because of the apparent risk and effort involved. If Nancy was taken from her home at night, it suggests planning: knowing she was there, knowing how to approach the house, and anticipating cameras and neighbors.

There has been no public indication that the home was ransacked, and the underlying motive is still unknown. Investigators have also cautioned against assuming that any ransom communication, if real, reflects the true motive; in some cases, ransom demands are misdirection or opportunism.

For the Guthrie family—and for investigators—everything still comes back to one urgent question: where is Nancy Guthrie, and is she alive?

Anyone with information is urged to contact the Pima County Sheriff’s Department at 520-351-4900.