A former FBI agent says investigators are closing in on the masked man captured on doorbell camera footage the night 84-year-old Nancy Guthrie vanished from her Tucson, Arizona home, and that identifying him will crack the case wide open.
Maureen O'Connell, the ex-FBI agent, told The Megyn Kelly Show that her sources inside the investigation indicate real progress after more than four months of work. She estimated investigators are roughly 75 percent of the way to making an arrest.
Her prediction was blunt:
"I think they're getting close to the porch guy, and when they get the porch guy, the floodgates shall swing open."
The "porch guy" is the figure at the center of the case, a masked, gloved individual seen on surveillance footage tampering with the doorbell camera at Nancy Guthrie's $1 million Tucson home before it went dark at 1:47 a.m. on February 1. The footage nearly vanished entirely. Pima County Sheriff Chris Nanos initially said no video was available because Nancy did not subscribe to Google's cloud storage service for her doorbell camera.
But the FBI found another way in. Cyber investigators recovered residual data still sitting on Google's backend servers, footage that had been processed but not yet purged. National Review reported that former FBI cyber special agent Adam Malone, now at the security firm Kroll, explained the recovery method: "They would have all looked at their development pipelines to say, Hey, do we process any data? Do we have any historical data that's still sitting here waiting to be purged?"
What the footage showed
The recovered video revealed a masked individual carrying a backpack and what appeared to be a gun, approaching Nancy Guthrie's front door and attempting to cover or disable the camera. FBI Director Kash Patel released the footage publicly, and investigators later distributed surveillance photos of the armed suspect.
That release produced at least one concrete lead. Just The News reported that the Pima County Sheriff's Department detained an individual for questioning during a traffic stop south of Tucson on February 10. Law enforcement was preparing to search a location tied to the detained person. No formal arrest on kidnapping charges has been announced.
O'Connell said on the show that her confidence comes from active sourcing, not speculation.
"I think they're close right now to pulling this case together, and that's what my sources are telling me. Things are happening."
Whether those sources are current law enforcement contacts or former colleagues, she did not say. Neither the FBI nor the Pima County Sheriff's Office has publicly confirmed her assessment. That gap matters. O'Connell's claims carry the weight of her professional background, but they remain her claims, not an official agency statement.
Ransom notes and a grim message
The investigation has also been shaped by two ransom notes sent in the days following Nancy's disappearance. The first demanded millions of dollars in bitcoin for her release. The second delivered a far darker message: it claimed Nancy had died.
Sources cited by CBS reported that the suspected kidnappers said they never intended for her to die and offered an apology to her family. AP News reported that Tucson TV station KOLD received multiple ransom notes and notified authorities, withholding the contents at the FBI's direction to help authenticate future communications. KOLD's news director, Jessica Bobula, said, "The station notified authorities and has shared only what the FBI has released about the notes."
The notes appear to contain details that lend them credibility. Breitbart reported that at least one note accurately referenced damage near Nancy's property and personal items she had with her at the time of her abduction, details not widely known to the public. Investigators reportedly believe the notes may have originated from those involved in the crime and are now following a digital trail to identify the senders.
The second note, sent from the same IP address as the first, claimed Nancy was "buried with nature now." Both notes have been deemed potentially legitimate by investigators, though no official confirmation of Nancy Guthrie's death has been made.
The ransom notes have drawn intense scrutiny for their timing and content, with some analysts suggesting they were designed to maximize psychological pressure on the family.
A daughter's plea
Savannah Guthrie, Nancy's daughter and NBC Today show anchor, has used her platform to beg the public for help. In a March interview with colleague Hoda Kotb, she described the footage of the masked figure as "absolutely terrifying" and spoke about the horror of imagining what her mother experienced.
"I wake up every night in the middle of the night. And in the darkness, I imagine her terror. And it is unthinkable, but those thoughts demand to be thought."
She also said she could not fathom the scene her mother encountered: "I can't imagine that is who she saw standing over her bed. I can't."
More recently, Savannah Guthrie made another emotional appeal on the Today show, acknowledging the unusual position of sitting on a news set while her own family's crisis was the story. She told her co-hosts and the audience that she had no comment on the coverage and was not involved in NBC's reporting on the case, but she would not pretend she wasn't there.
"I just want to take the opportunity to ask people to really to beg people to come forward, somebody knows something."
The Guthrie family is offering a reward of up to $1 million for information leading to Nancy.
Four months, no arrest, and lingering questions
The case has now stretched past four months with no named suspects and no public arrest on kidnapping charges. The investigation involves both the FBI and the Pima County Sheriff's Office, and President Donald Trump weighed in, stating: "I am directing ALL Federal Law Enforcement to be at the family's, and Local Law Enforcement's, complete disposal, IMMEDIATELY," as the Washington Examiner reported.
FBI Phoenix Division Special Agent in Charge Heath Yonke confirmed the bureau's engagement: "We are aware of a ransom letter that was sent to the local media and then to national outlets. As with every lead, we are taking it seriously."
But serious questions remain unanswered. Has the FBI or the sheriff's office verified the second ransom note's claim that Nancy is dead? Were the notes authenticated? What is the full description of the masked figure beyond gloves and a mask? And who are O'Connell's sources, current investigators or former colleagues trading on old networks?
There are also signs of unusual digital activity surrounding the case, including changes to Nancy Guthrie's social media accounts months after she vanished, a detail that only deepens the sense that someone with knowledge of her life has remained active.
Meanwhile, the broader investigation has drawn persistent pressure from outside voices, including O'Connell herself, who has pushed publicly for more transparency from the agencies running the case.
What the case demands
O'Connell's prediction may prove right. She may have genuine insight from people close to the investigation. But predictions are not indictments, and sources are not convictions. What the public knows for certain is this: an 84-year-old woman was taken from her bed in the middle of the night by an armed, masked intruder who disabled her camera first. Two ransom notes followed. One claimed she was dead. Four months later, no one has been charged.
The FBI recovered footage that was supposed to be gone. Investigators have a face, or at least a mask, to work with. The digital trail from the ransom notes may yet lead somewhere. But none of that is the same as an arrest, a prosecution, or justice for Nancy Guthrie and her family.
An 84-year-old woman deserves better than four months of silence and a 75-percent estimate. Her family deserves answers. The public deserves to know that the people paid to solve crimes like this one are finishing the job.
