Purely speculative post here about things the perp could easily have done, but apparently avoided in order to lower risk. No individual thing is remarkable but together, the list suggests a careful but bold thinker.
No direct contact
As far as we know, he didn’t use NG’s phone to obtain SG’s or AG’s contact details. (Given the hoaxer’s texts, AG’s number is presumably easy to find online, but SG’s isn’t.) As far as we know, he didn’t contact either of them directly by text, phone call or some other messaging app. He didn’t issue direct ransom demands, threatening the family with consequences if they contacted LE.
He had a gun, so could have got NG to unlock her phone using a fingerprint or face scan. As far as we know, he didn’t do it. Direct communication would have been a more traditional route for a kidnapping, and a faster one, but way riskier. He chose to avoid the risk.
Car
Assuming he used a vehicle, he either got lucky (unlikely) or knew that the ubiquitous home-surveillance cameras in that part of Tucson wouldn’t be able to record decent footage of vehicles on the street at night, given the local lighting code. (No streetlights, and houses far from the streets.) There are also local protests against Flock cameras that record car license plates – I think he knew all this, and felt he wasn’t at high risk of being identified.
Gear
If he’d gone to the nearest Walmart and bought all his kidnap gear in a single transaction shortly beforehand, I think he’d have been identified by now. Or if he’d chosen unusual, more expensive stuff, perhaps. He did neither. He selected from widely available items, and apparently adopted a purchase strategy smart enough to have blended in, so far. There are Walmarts everywhere – not just in the US but in Mexico and Canada. I’ve seen reports claiming that that specific ski mask is only available online. I don’t know if the claims are valid, but if so, that fact hasn’t led to the perp’s identification.
Writing
We haven’t seen the ransom note, but Harvey Levin, a licensed attorney (for what that’s worth), praised its structure and writing quality. I think it’s safe to say HL was impressed and surprised. (See his interview with Chris Cuomo on Newsnation.) If the ransom note came from the perp, Levin’s observations are significant. Whatever you think of his business choices, Harvey isn’t dumb. (And the note did reportedly describe a non-obvious location for the watch and the destruction of the rear floodlights.)
Online anonymity
If the ransom notes are the abductor’s, he has managed to send one or two of them electronically without being traced. Perhaps three, if the third note was genuine. That isn’t as easy as it sounds, for most people. Despite Levin’s casual use of the term ‘email’, I think (speculation) that all the tips were submitted using web forms. That’s actually a smart choice. (There isn’t a published email address for the tip line on the TMZ website and Levin said “the letter” came through to the tip line, which is fed by a web form. TMZ receives each submission as an email.) Sending real email anonymously is direct and fast, but harder. The perp’s decision to avoid it is another sign of risk management. If he used VPNs and/or anonymisers, he did it well.
Patience
When KOLD and KGUN didn’t publicise the first note, the perp waited and went to TMZ a day later. He didn’t panic and switch to direct contact with the family. TMZ doesn’t seem like an obvious choice, but it worked.
Disguise
No one has identified the perp from the video clips that have made headlines. Whatever he did to disguise himself – possibly even modifying his gait – has been effective enough to prevent identification for a couple of weeks. The photos and videos have been viewed widely. But there has been no cluster of tips around a single name, leading to an arrest.
Unthinkable
Video aside, no one among NG’s family or friends has had a strong enough suspicion about someone within their social circles for that person to have emerged as a leading candidate, and then to have been investigated and arrested. Did the perp know he was safe? That no one would ever dream it would be him? Or is he just distant enough to be out of mind?
Electronic trails
So far, LE hasn’t traced him using electronic or written records – phone pings, vehicle GPS, highway cameras, hotel bookings, gun sales, holster sales.
———-
In a case like this, with so much public interest and hundreds of officials involved, each point is an achievement. Taken together, they seem like more than luck.
There’s a lot of guesswork and speculation above, because we don’t know the state of the investigation or even whether the ransom notes are real. We don’t know if fortune has just been on the perp’s side. But it’s possible that he is very good at thinking, planning likely outcomes, and managing the downsides. That lantana business made him look amateurish, but perhaps he didn’t care because knew that it didn’t raise his chance of failure, and that’s all he cared about.
More than that, he’s also comfortable carrying out an ultra-high-profile, unusual crime without panicking or arousing the suspicion of anyone in a position to report it. No report of a suspect husband, son, brother or colleague has led to an arrest.
Bold, smart (or very lucky) and callous.
Note: I have a solid track record of overestimating criminals.