BRIAN ENTIN INVESTIGATES
BRIAN ENTIN INVESTIGATES
February 11, 2026

ON THE SCENE as subject in Nancy Guthrie kidnapping questioned, family insists he is not connected

Quick Read

An on-the-scene report details the detention of a subject in Rio Rico, Arizona, connected to the Nancy Guthrie kidnapping, including a search warrant at his home and an interview with his mother-in-law who maintains his innocence.
FBI considers the detained individual a 'subject,' indicating high confidence in his connection to the crime.
A federal magistrate approved the search warrant, confirming probable cause based on FBI evidence.
The FBI deposited $300 into the ransom Bitcoin account as bait to monitor activity, not as a ransom payment.

Summary

Host Brian Entin reports live from Rio Rico, Arizona, where a man identified as Carlos Palos, the son-in-law of the homeowner, was detained for questioning in the Nancy Guthrie kidnapping case. The FBI executed a search warrant at the residence, seizing all family cell phones. The subject's mother-in-law, Hosaphina, vehemently defends him, stating he was home during the kidnapping, doesn't know Nancy Guthrie, and doesn't possess the distinctive clothing seen in surveillance footage. Retired FBI agent Steve Moore provides analysis, explaining that the FBI's use of 'subject' indicates high confidence in their target, and that a federal magistrate approved the search warrant, confirming probable cause. Moore also discusses the FBI's $300 Bitcoin deposit into the ransom account as a 'fishing hook' to gauge activity and suggests the subject was likely under surveillance prior to his detention.
This episode provides immediate, on-the-ground reporting and expert analysis on a significant development in the high-profile Nancy Guthrie kidnapping case. It offers insight into the FBI's investigative tactics, the legal standards for search warrants, and the complexities of tracing digital currency in criminal investigations, while also capturing the human element through the family's perspective.

Takeaways

  • A man, Carlos Palos, was detained in Rio Rico, Arizona, for questioning in the Nancy Guthrie kidnapping case.
  • The FBI executed a search warrant at Palos's mother-in-law's home, seizing all family cell phones.
  • The mother-in-law, Hosaphina, insists her son-in-law is innocent, was home during the incident, and doesn't own the clothes seen in surveillance.
  • Retired FBI agent Steve Moore states 'subject' implies the FBI believes he is responsible for the crime.
  • The FBI likely deposited $300 into the ransom Bitcoin account to 'bait' the account holder into activity, not as a ransom payment.
  • Investigators are searching for specific clothing, a gun, holster, gloves, and any personal effects of Nancy Guthrie.
  • The suspect's attire in surveillance footage (ill-fitting holster, work gloves) suggests inexperience with firearms.
  • Kidnapping cases often involve multiple perpetrators, and Nancy Guthrie has not yet been located.

Insights

1FBI's 'Subject' Designation Implies High Confidence

Retired FBI agent Steve Moore clarifies that when the FBI uses the term 'subject' in an investigation, it signifies their belief that this individual is responsible for the crime, distinguishing it from 'person of interest' or 'suspect.' This indicates a strong evidentiary basis for their actions.

Moore states, 'If the FBI is actually using that term, that means he's their guy.'

2Federal Magistrate Approval Confirms Probable Cause for Search

The execution of a search warrant by the FBI is not a casual act; it requires a federal magistrate or judge to review evidence and agree that there is probable cause to believe the individual is connected to the crime. This legal hurdle suggests the FBI possesses substantial, credible information.

Moore explains, 'You have to show probable cause to believe somebody is the subject of this crime and bring that before a federal magistrate and have them agree before you can get a search warrant.'

3Bitcoin Deposit as Investigative Bait, Not Ransom Payment

The FBI's reported deposit of $300 into the Bitcoin ransom account was a deliberate investigative tactic. It was intended to 'light up' the account, generating activity or notifications that could help identify or track the holder, rather than fulfilling the ransom demand itself.

Moore suggests the $300 deposit was 'like a fishing hook, hoped that it would prod somebody to take action or at least look at... money has been deposited in your account. You light up your side and check it out.' He adds it tells him they likely didn't pay the full ransom.

4Surveillance Before Public Photo Release

The fact that the subject was pulled over while doing Door Dash, rather than being apprehended at home, strongly suggests he was already under active surveillance by the FBI. This indicates that investigators had identified him as a person of interest prior to the public release of surveillance photos.

Moore states, 'It means he was under surveillance... The FBI was probably on him before the pictures came out this morning because I don't think based on that photograph alone that somebody just somebody in Rio Rico picked up a phone and said, 'Hey, I know that guy behind the mask.''

5Inexperienced Display of Weaponry in Surveillance

Analysis of the surveillance photos of the kidnapper revealed an unusual and impractical way of carrying a firearm. The individual used a holster designed for a much larger revolver to carry a small semi-automatic pistol, suggesting a lack of familiarity or experience with firearms.

Moore describes the kidnapper's gun setup as 'kind of embarrassing,' noting 'he had the holster he had was for a long barreled revolver... what he had in that holster was a a little tiny um semi-automatic that took up about a third of the holster and looked like it was falling out half the time.'

Lessons

  • Understand that law enforcement's use of specific terminology, like 'subject,' often reflects a higher degree of investigative confidence than general terms like 'person of interest.'
  • Recognize that search warrants are not issued lightly; they require a federal magistrate's approval based on demonstrated probable cause, indicating significant evidence has been gathered.
  • Be aware that in complex criminal investigations, digital transactions like Bitcoin can be used by law enforcement as a tool for tracking and identifying suspects, even with small amounts, to 'bait' activity.

Quotes

"

"If the FBI is actually using that term [subject], that means he's their guy."

Steve Moore
"

"They broke in my house without a warrant and nothing. They broke my door. They went inside my house. My son was playing on Nintendo. He had his headphones on. They got him and put him cuffed and took him outside."

Hosaphina (Subject's Mother-in-Law)
"

"I think that that was probably to see what kind of activity it would generate for the holder of that Bitcoin account. And that could have been a strong piece of evidence."

Steve Moore
"

"You have to show probable cause to believe somebody is is the subject of this crime and bring that before a federal magistrate and have them agree before you can get a search warrant."

Steve Moore

Q&A

Recent Questions

Related Episodes

DNA challenges could take a year, and details on 5 hour interrogation in Nancy Guthrie investigation
BRIAN ENTIN INVESTIGATESFeb 22, 2026

DNA challenges could take a year, and details on 5 hour interrogation in Nancy Guthrie investigation

"The Nancy Guthrie investigation faces significant DNA testing delays, while a man previously detained and interrogated for hours by law enforcement, Carlos, is now seeking to clear his name with legal action."

Nancy Guthrie investigationPima County Sheriff's OfficeFBI investigation
Hired Help? Mystery Perp? Nancy Guthrie Search Blows Wide Open | Nancy Guthrie Missing Day 14
Drop Dead Serious with Ashleigh BanfieldFeb 15, 2026

Hired Help? Mystery Perp? Nancy Guthrie Search Blows Wide Open | Nancy Guthrie Missing Day 14

"On day 14 of Nancy Guthrie's disappearance, host Ashleigh Banfield and former FBI Special Agent Maureen O'Connell dissect new federal warrants, the use of a 'signal sniffer' for a pacemaker, and the perplexing details of the crime scene."

Nancy GuthrieForensic ScienceDNA Evidence
On the scene: Another note arrives in Nancy Guthrie investigation as police swarm the house again
BRIAN ENTIN INVESTIGATESFeb 7, 2026

On the scene: Another note arrives in Nancy Guthrie investigation as police swarm the house again

"A second ransom note arrived at a local TV station, prompting renewed FBI activity at Nancy Guthrie's house and raising questions about the initial investigation's handling of the challenging desert terrain and local ordinances."

Nancy Guthrie investigationRansom notesFBI investigation+2
SAVANNAH GUTHRIE'S MOM MISSING: DAY 66
Crime Stories with Nancy GraceApr 7, 2026

SAVANNAH GUTHRIE'S MOM MISSING: DAY 66

"On day 66 of Nancy Guthrie's disappearance, investigators grapple with two distinct sets of Bitcoin ransom notes, digital tracing challenges, and potential physical evidence like shoe coverings, as new, dubious claims emerge from a 'hyena' seeking payment for information."

KidnappingRansom DemandsBitcoin+2