In the confirmed investigative timeline, 84-year-old Nancy Guthrie disappeared in the early morning hours of February 1 from her Catalina Foothills home.
Authorities have confirmed signs of forced entry, blood evidence inside the residence, and a disabled security camera near the front door.
Her phone, wallet, car, and essential medications were all left behind—details investigators say strongly suggest she did not leave on her own.
Federal agents, working with the Pima County Sheriff’s Department, have spent weeks reconstructing the final 24 hours before her disappearance.
As part of that effort, digital forensics teams reviewed financial activity, phone data, and surveillance footage across the area. During this process, one detail stood out.
A credit card transaction was recorded late on January 31 at a gas station about five kilometers from Nancy’s home—just hours before the suspected abduction window.
The purchase included a black balaclava and tactical gloves, items consistent with concealing identity and avoiding fingerprints.
Authorities have not identified the cardholder or confirmed whether the card was used fraudulently. However, investigators did obtain surveillance footage from the station.
According to sources familiar with the footage, a man entered the store without covering his face, selected the items, and completed the purchase at a self-checkout. Only after leaving did he appear to handle the balaclava packaging.
The image captured before the mask was used is reportedly clear enough for identification. While it hasn’t been released publicly, officials have shown it to key individuals as part of standard investigative procedure.
Among those asked to view the image was Savannah Guthrie. Authorities have not disclosed her response or confirmed whether any identification was made, emphasizing that recognition alone must be supported by independent evidence.
Investigators are now working to align the purchase with the broader timeline. Transaction data, fuel logs, and traffic cameras are being cross-checked to trace the individual’s movements after leaving the station.
One theory suggests the purchase may have been a critical mistake—a point where planning gave way to overconfidence. Buying concealment items so close to the target location and timeframe could indicate urgency, or a belief that anonymity would be enough.
Forensic teams are also comparing the gloves to any trace or print evidence recovered from the scene. If packaging was discarded nearby, it could provide additional links.
Officials continue to caution against speculation, noting that a purchase alone does not prove involvement. The identity of the buyer and the context of the transaction remain under investigation.
Still, the details carry weight.
A mask.
Gloves.
A purchase made just hours before blood was discovered inside a quiet home.
If the person captured on that camera turns out to be someone within Nancy’s circle, the case could shift from an outside attack to something far more personal.
In a case already shaped by ransom demands, hidden evidence, and digital clues, this moment may stand out for its simplicity.
A card swipe.
A receipt.
And a camera that recorded everything before the mask went on.