Nancy Guthrie, the mother of Today Show co‑host Savannah Guthrie, has now been missing for three full weeks. This is one of the most heavily covered missing persons cases I can remember in our country. And yet, law enforcement still has not found Nancy and they still haven’t made an arrest. They have not even publicly identified a suspect. The further we get into this case, the more things we find that simply don’t make sense.
1. The DNA That Seems to Make No Sense
You don’t have to be a true crime fan to know that DNA testing is the gold standard of modern investigations. It’s incredibly precise and can identify a specific person from a specific sample. But DNA only helps if you (1) can find it, and (2) have enough of it to test. At first, you might think both of those would be nearly impossible in this case.
We’ve all seen the Ring camera video of the man at Nancy Guthrie’s door. He’s wearing gloves and appears to be covered from head to toe, except for a small portion of his mouth and eyes. It’s natural to wonder: how is DNA going to be left at the scene at all? But investigators got a lucky break. Police found a pair of gloves about two miles from Nancy’s home that look like the ones the man in the video was wearing.
Whoever wore those gloves would have had to put them on, potentially leaving touch DNA on the inside. That might create some transfer and make the gloves powerful evidence. And yet no one has been arrested. There are a couple of key reasons for that. First, those gloves may not even be connected to the scene.
They were found two miles away. There are a thousand legitimate reasons to use that style of gloves. Here’s what the sheriff posted on X:
“DNA evidence from gloves found approximately 2 miles from Nancy Guthrie’s residence was submitted to CODIS and produced no matches. There is additional DNA evidence that was found at the residence that is also being analyzed.”
He also clarified:
“The DNA that was submitted to CODIS was from the set of gloves found two miles away. It did not trigger a match in CODIS and did not match DNA found at the property. The DNA found at the property is being analyzed and further testing needs to be done as part of the investigation.”
The good news here: it sounds like there is additional DNA inside the house. It does not match the glove DNA, but it could be incredibly important. Now, let’s talk about the second problem with this evidence: DNA only helps if you can match it to a person. Law enforcement does not have a giant database containing everyone’s DNA.
Instead, they compare unknown DNA to CODIS, the FBI’s Combined DNA Index System. CODIS is limited: it contains profiles of known offenders. If someone is convicted federally, they’re DNA‑sampled and entered into CODIS. All 50 states participate, but it’s still just convicted (and in some places, arrested) people. In this case, that search didn’t work. There is no known prior offender linked to the DNA they’ve found.
The next step is likely genetic genealogy. This was used in the Bryan Kohberger case. Genetic genealogy relies on consumer DNA databases—built by people submitting their DNA to companies because they want to learn about their ancestry, like Ancestry.com. Law enforcement can sometimes get a break if a relative of their unknown suspect—say a cousin or sibling—has submitted DNA.
They look for close matches and then narrow down the family tree. It is almost certainly going to be used here. We know this because of what the sheriff told Fox 10 reporter Justin Lum. Lum asked Sheriff Nanos, “Do you go the genetic genealogy route?” Sheriff Nanos responded, “Well, absolutely you do that, but we have other DNA evidence from the scene that is more critical to me than something found two miles away.”
So he’s essentially saying: *I’m more interested in what was found in the home than the gloves—and yes, we’re going to do genetic genealogy.* But there’s a huge problem with using genetic genealogy. The largest DNA companies, including Ancestry.com, explicitly say law enforcement is not allowed to use their customers’ submissions for criminal investigations.
Why? One major concern is that people might refuse to use these services if they knew police could access their genetic data. The Department of Justice has a policy that federal law enforcement cannot just dive into any genetic database they want. The DOJ policy states:
“Investigative agencies shall identify themselves as law enforcement to genetic genealogy services and enter and search forensic genetic profiles only in those services that provide explicit notice to their users and the public that law enforcement may use their sites to investigate crimes or to identify unidentified human remains.”
In other words, if a DNA company tells law enforcement “you may not use this database,” then federal agents are supposed to respect that. There are some services that do allow law enforcement, but if the specific site forbids it, the DOJ says they can’t use it.
In the Bryan Kohberger case, this became a huge point of contention. The defense claimed the FBI ignored these rules and used restricted databases anyway. They asked the judge to exclude the DNA evidence entirely, which would have gutted the state’s case against Kohberger. Ultimately, the judge allowed the DNA in, and Kohberger pled, so we never got an appellate court ruling clarifying exactly what’s allowed.
The risk to law enforcement is obvious: it’s not enough to find a DNA match. If they do it the wrong way and a judge later rules that they violated policy or privacy, that evidence could be thrown out. They need both (1) a match, and (2) a method the court will approve. That requires extreme caution.
One interesting note: Sheriff Nanos has been heavily criticized for sending the DNA to a private lab in Florida instead of giving it to the FBI. But there may be a strategic reason. The FBI is bound by DOJ policy. A private lab is not necessarily bound in the same way. If that Florida lab handles the genetic genealogy step, it might create fewer legal complications down the line.
So, the DNA situation looks confusing on the surface. But once you understand the limits of CODIS and the legal landmines around genetic genealogy, a lot of what we’re seeing in this case actually does make sense. It may simply be a matter of time before those tests produce a real lead.
—
### 2. Why Police Investigated the Son‑in‑Law So Heavily
The second thing that seemed strange but has a legal explanation is the intense focus on Nancy’s son‑in‑law, Tomaso Cion. Early on, journalist Ashley Banfield reported that a private source told her law enforcement had suspicions about Cion. He is married to Nancy’s daughter Annie, one of Nancy’s three children.
That isn’t shocking. Law enforcement almost always looks closely at family in cases like this. Statistically, family and close associates often play a role in violent crimes or disappearances. And importantly, he was the last known person to see Nancy alive, aside from whoever took her. So it makes sense that investigators would seriously consider him.
But things really heated up when law enforcement appeared to “double down” on investigating him. They searched Tomaso’s home and canvassed the neighborhood on February 5th. Then on February 7th, they returned and conducted another search. This time, they were inside the home for several hours, took photos, and left with a bag of evidence. A deputy was seen wearing blue latex gloves to avoid contaminating the scene.
All of that looks very intense if Tomaso is innocent. It suggests they were seriously entertaining a theory that he might be involved. That raises the question: what led them there? According to the timeline, 84‑year‑old Nancy spent the evening at Annie and Tomaso’s home. Around 9:48 p.m., Tomaso drops her off at her house.
At 9:50 p.m., her garage door closes. The fact that investigators were focusing on the Cion home suggests they considered possibilities like:
– Did Nancy ever actually make it safely inside?
– Could something have happened earlier in the evening?
– Was there any indication she might have been taken from or returned to their house?
Agents were seen carrying a silver briefcase into the Cion home. That likely contained equipment to image or extract data from digital devices—family computers, phones, or other electronics. So the level of scrutiny led to a lot of speculation about Tomaso. People even picked apart his appearance: he has a mustache, and so does the man at Nancy’s door. Some argued they’re similar in size. Others debated whether the suspect’s “softened chin” suggested a beard like his.
Confusion grew when, over the weekend, the sheriff said “everyone’s a suspect,” but then on February 16th, the sheriff’s office posted on X:
“To be clear, the Guthrie family, to include all siblings and spouses, has been cleared as possible suspects in this case. The family has been nothing but cooperative and gracious and are victims in this case. To suggest otherwise is not only wrong, it’s cruel. The Guthrie family are victims, plain and simple. Please, I’m begging you—the media—to honor your profession and report with some sense of compassion and professionalism.”
So why investigate Tomaso so aggressively if the sheriff now says he’s been cleared? This is where the legal explanation comes in. In a 1995 case called *Kyles v. Whitley*, the U.S. Supreme Court held that a defendant is entitled to present evidence that the police investigation was incomplete or flawed.
In practice, that means: if detectives focus on one suspect and ignore others, that future defendant can point to the sloppy investigation as part of their defense. A jury might be persuaded that police “tunnel vision” caused them to miss the real perpetrator. To prevent that, law enforcement needs to show they did not fixate on one person to the exclusion of others.
By thoroughly investigating Tomaso and the rest of the family, they build a record they can later use in court. They can say, “We looked at everyone. We checked the son‑in‑law. We checked the siblings. We ruled them out based on evidence.” That makes it harder for a future defense attorney to argue that police ignored obvious alternative suspects.
So while it may feel confusing or unfair to Tomaso in the short term, in the long term, this thoroughness actually helps strengthen the case against whoever is ultimately charged. It’s not that police *thought* the family did it and then flipped. It’s that they had to seriously consider and then formally eliminate them.
—
### 3. What the Law Does (and Doesn’t) Let Them Do With DNA
Closely tied to the first point is a third “strange” aspect that becomes clearer when you look at the law: the choice to use a private lab in Florida instead of the FBI. A lot of people have criticized this decision, viewing it as a sign of incompetence or jurisdictional ego. But it might be more strategic than it looks.
As we discussed, the DOJ policy restricts how federal law enforcement can access consumer DNA databases. FBI analysts might have fewer options or more red tape when it comes to using genetic genealogy. A private lab is not automatically bound by those same internal federal policies. They still must follow federal and state law, but they may have more flexibility in how they interface with cooperating genealogy services.
If the Florida lab is experienced in this type of investigative work, they may already know exactly which databases allow law enforcement and under what conditions. That could let them move faster, with fewer procedural delays, while still preserving the chain of custody and admissibility in court.
There’s also the issue of transparency and litigation risk. If the FBI runs all the DNA, any misstep becomes part of the government’s direct record and is easier for defense counsel to attack. If a private lab performs the analysis, law enforcement can potentially firewall certain steps and maintain cleaner documentation about what was and wasn’t done according to DOJ policy.
To be clear, none of this guarantees success. The DNA still has to match someone or someone’s close relative. But it does explain why, from a legal and strategic standpoint, what looks like a weird choice may actually be carefully calculated. The apparent “delay” in DNA results may reflect caution rather than incompetence.
—
## The Three Things That Still Don’t Make Sense
Now we come to the parts of this case that, at least in my view, still don’t logically fit. These are not easily explained by legal strategy or procedural rules. If you have coherent theories for any of these, they’re worth sharing—because they’re the big open questions.
—
### 4. The 40‑Minute Gap in the Timeline
According to the sheriff’s office, there is a 40‑minute gap between when Nancy’s doorbell camera was disconnected and when her pacemaker app disconnected from her phone. That’s strange. On the timeline: around 9:48 p.m., Tomaso drops Nancy off at home. At 9:50 p.m., her garage door closes. After that, things become blurry and fragmented.
Here’s what the sheriff said at a press conference:
– At 1:47 a.m., the doorbell camera disconnects.
– At 2:12 a.m., software detects “a person” on a camera, but there’s no video available.
– They had no subscription, so the system overwrites itself. The FBI later recovered some footage, but not everything.
– The sheriff acknowledged it’s possible the “person” detected at 2:12 could even have been an animal; they simply don’t know.
– At 2:28 a.m., Nancy’s pacemaker app shows it was disconnected from her phone.
If we assume the doorbell was intentionally disabled at 1:47 a.m., then something—or someone—was likely inside the home for roughly 40 minutes before the pacemaker signal went offline. That is a long time for an intruder to be in an occupied house.
If this was a kidnapping, that timeline is really odd. How long would it take a presumably strong intruder to control an 84‑year‑old woman in fragile health? A “classic” kidnapping would more likely involve quickly subduing the victim and getting out as fast as possible to reduce the chance of being caught.
If it wasn’t a kidnapping, then what exactly was happening in those 40 minutes? Was the intruder searching the house? Trying to access something specific? Waiting for something? Even in a burglary scenario, 40 minutes is on the high side, especially with a potential witness present. And this is someone savvy enough to disable the doorbell camera at just the right moment.
For now, the length of time simply doesn’t make much sense. The gap is too big to be easily explained by a simple “grab and go” scenario. Without more details, this is one of the most baffling pieces of the puzzle.
—
### 5. The Refusal to Say Whether There Was Forced Entry
The fifth issue is the sheriff’s refusal to answer a seemingly basic question: was there forced entry at Nancy’s home? He has been asked this multiple times and consistently declined to answer. He told reporter Justin Lum:
“I’m not going to get into the entry of the home or forced entry or any of that. What I’ll tell you is I believe, just as I did initially, that Nancy was removed from that home against her will. She was kidnapped and we still believe that.”
At a press conference, he added:
“Someone had mentioned there was forced entry. I have no clue where that comes from. We have been very consistent. We are not discussing that at all—whether it’s forced entry or not forced entry. That is something we’re just not discussing.”
On the surface, this is odd. Forced entry is usually a straightforward factual detail. Either there’s damage to a door, window, or lock—or there isn’t. It’s not typically treated as highly sensitive. The fact that the sheriff refuses to discuss it suggests there is something about the method of entry that is unusual or highly probative.
One possibility: there was no forced entry. If that’s the case, then how did the person get inside?
– Did Nancy leave a door unlocked?
– Did the person have a key?
– Was the door tampered with in a way that wouldn’t show obvious damage?
If investigators believe the intruder used a very specific method of entry, they may be holding that detail back as “case knowledge.” That way, if a suspect later claims involvement, or if someone offers a tip, law enforcement can check whether their story matches that hidden detail.
Still, from a public perspective, the refusal to answer such a basic question remains one of the logical gaps. We can guess at the reason, but we don’t have confirmation.
—
### 6. The “Kidnapping for Bitcoin” Theory
The final piece that doesn’t add up is the idea that this is a kidnapping. In classic kidnapping cases, control is everything. The kidnappers want maximum control over timing, location, and information. The family wants maximum assurance that the victim is alive and that paying a ransom will actually bring them home.
In most kidnappings, contact with the family is direct and tightly managed. Typical messages look like: “Don’t call the police,” “Come alone,” and “If you don’t follow instructions, you’ll never see them again.” Privacy and secrecy are crucial.
In this case, the Bitcoin ransom demand was sent to the media. That move guarantees maximum public attention. It ensures coverage on TV, online, and on social media. From a kidnapper’s perspective, that is the exact opposite of what you want if your goal is a clean exchange.
Once the media is involved, any ransom drop or communication will be under intense scrutiny. You can easily imagine helicopters, drones, and surveillance saturating the area. It becomes almost impossible to conduct a quiet hand‑off. That’s why most ransom demands are private, not public.
There’s another huge problem: there appears to have been no proof of life. No photos, videos, voice messages, or other evidence showing that Nancy is alive and under the control of the person making the demands. Without proof of life, why would the family believe the kidnapper actually has her? Why would they pay?
If this is a kidnapping, it’s a remarkably incompetent one. If it’s *not* a kidnapping, then what exactly is the Bitcoin demand? A cruel hoax? A distraction? A way for someone to insert themselves into the case?
Right now, the “kidnapping for Bitcoin” theory just does not fit the normal patterns of kidnap and ransom cases. The behavior doesn’t align with standard criminal logic, which is why this aspect has so many people scratching their heads.
—
## Where That Leaves Us
So here’s where things stand:
– **DNA and genetic genealogy**: complicated by legal limits, but there is a path forward and more evidence in the house than we first realized.
– **The focus on family, especially Tomaso Cion**: intense but legally explainable—police must thoroughly investigate and then eliminate close relatives to avoid accusations of a flawed investigation.
– **The use of a private lab in Florida**: criticized, but possibly a strategic way to navigate DOJ DNA rules.
And then the big open questions:
1. Why was there a 40‑minute gap between the doorbell camera disconnecting and the pacemaker app going offline?
2. Why is the sheriff refusing to disclose whether there was forced entry?
3. Why does the “kidnapping for Bitcoin” theory look so irrational compared to how kidnappings usually work?
Those are the pieces that, so far, don’t logically click into place.
We’ll have to watch how the investigation unfolds—especially the DNA results and any future clarifications from the sheriff’s office. For now, this remains a case where some parts can be explained by law and procedure, and others still sit stubbornly outside any obvious explanation.
