Nancy Guthrie Case Takes Disturbing Turn With an AI-Generated Image Sent in Ransom Emails Today

Former FBI agent Jennifer Coffindaffer says four emails demanding Bitcoin for missing Nancy Guthrie reached her in April 2026. One contained an image she believes was AI-generated, raising concerns that people following the disappearance in Arizona could be targeted by bogus ransom claims.

Guthrie, 84, is the mother of Savannah Guthrie, co-anchor of NBC's Today. The FBI says she was last seen at her Catalina Foothills home near Tucson on 31 January and reported missing on 1 February. Investigators believe she was taken against her will.

The emails are not a new development from this weekend. Coffindaffer's account was reported in early October, and authorities have not established that the senders knew anything about Guthrie's whereabouts.

Nancy Guthrie Emails Included Bitcoin Demands and an Unverified Image

Coffindaffer, a retired FBI agent and NewsNation contributor, said the messages arrived over two days at a private email address. She initially told only the FBI, choosing not to communicate with whoever sent them.

According to correspondence reviewed by Newsweek and subsequently covered in IBTimes UK's earlier reporting, two messages demanded 25 bitcoin for Guthrie's release. A later email reduced the demand to two bitcoin and provided cryptocurrency payment instructions.

The emails also reportedly included Bible passages and personal details about Coffindaffer. She said her seldom-used email address was not publicly available and believed the religious references were intended to appeal to her beliefs.

A picture accompanying the messages appeared to show a distressed woman resembling Guthrie. Coffindaffer believed it was artificially created, describing a shaved head, dirt on the woman's face and a tear on her cheek.

There is no publicly verified forensic examination establishing that the image was generated using artificial intelligence. It provides no reliable evidence of Guthrie's condition or location, regardless of how convincing it may appear.

'I never responded to any of them,' Coffindaffer said. 'I went straight to the FBI with them.'

She said an FBI agent later told her the Bitcoin address differed from one associated with earlier ransom messages considered potentially genuine. That comparison is Coffindaffer's account, not a separate public determination by the bureau about her emails.

She suspects several people may have been involved in preparing the messages. Investigators have not confirmed an organised operation, identified the senders or linked them to Guthrie's disappearance.

Nancy Guthrie Ransom Claims Prompt Warnings Against Scammers

Coffindaffer explained her decision to speak publicly after learning that Lauren Serpa, a neighbour of Guthrie, reportedly received a similar message in September. Serpa posted about the contact on Facebook, including an image Coffindaffer said closely resembled the one she received.

Coffindaffer told NewsNation she feared that 'other people might be contacted and might fall for the ploy.'

A similar image, however, does not establish common authorship. Nor does the appearance of personal information prove that those sending demands had knowledge of the suspected abduction.

The wider investigation has produced several other ransom-related messages, with different assessments from authorities. In July, the FBI said some had been rejected as illegitimate extortion attempts, while others might be genuine and remained under investigation.

On 29 September, the Pima County Sheriff's Department said a possible ransom text reported the previous day was 'not credible.' That finding concerned a separate message and should not be read as an official verdict on Coffindaffer's April emails.

The department urged anyone receiving communications about Guthrie to report them to law enforcement. It warned the public against sending money or providing personal information in response to unsolicited demands.

IBTimes UK has not independently examined Coffindaffer's emails, their payment addresses or the disputed image. Her suspicion that the senders were scammers remains an assessment, not a finding that authorities have publicly confirmed.