In 1999, two hikers near a Missouri cornfield discovered a plastic tube containing two handwritten cipher notes tied to the body of Ricky McCormick. The notes were believed to contain clues about his death, yet decades of analysis by professional cryptanalysts, including the FBI and NSA, have not produced a definitive decoding or identification of a killer. This article explains who Ricky McCormick was, the contents and analysis of the notes, the investigative status, and why this case continues to draw sustained public and technical interest.
Who Was Ricky McCormick
Rick McCormick was a 41-year-old resident of St. Charles County, Missouri, with a documented history of arrests for theft and drug offenses. He was reported missing in June 1999 after failing to appear at work, and his body was found days later in a field. Law enforcement described him as a known figure in local investigations, with no clear indication of enemies or a targeted motive at the time. The discovery of encrypted notes with his body immediately raised questions about whether they held clues to his death or his activities.
The Two Cipher Notes: Content and Condition
Physical Description and Recovery
The notes were found inside a white plastic tube partially buried near McCormick’s body. Each note was handwritten on horizontal rule paper, folded, and secured with rubber bands. The FBI laboratory received the notes in August 1999 for analysis. Both texts use uppercase letters without punctuation or clear spacing between words, features that complicate automated analysis and manual decryption attempts.
Notable Structural Features
- All uppercase letters, no punctuation, minimal word separation
- Lengths of 287 and 340 characters, respectively
- Vocabulary mixes common English words with invented strings
- No clear alignment with known historical cipher formats
Official Analysis and Expert Work
Since their discovery, the FBI’s Cryptanalysis and Racketeering Records Unit (CARU) and other government agencies have examined the notes. Public statements from officials indicate that the texts do not clearly match known cipher techniques such as substitution, transposition, or book codes. The notes include repeated two- and three-letter groups that resemble structured language, but no consistent key has been found that yields coherent plaintext. As a result, the codes remain classified as unknown in agency summaries released to date.
What the Notes Say: Transcriptions and Comparisons
Note 1 (287 characters)
VFKX YXZQ KSAW QKFN ZYGU EQMV MNAI WLTP LJXX VA ZJ HXPZVX ZJAC QKFN ZYGU KSAW VFKX YXZQ
Note 2 (340 characters)
VFKX YXZQ BPOL TJJD VFKX CORR BPOL TJJD VFKX YXZQ BPOL TJJD VFKX CORR BPOL TJJD VFKX YXZQ
Comparisons with Known Systems
Early speculation suggested possible links to code books, simple substitution ciphers, or phonetic patterns. Later analysis compared the strings to running key ciphers, keyboard walks, and date-based ciphers, none of which produced plausible results. The repeating pairs and short clusters are common in short random texts and can appear in both structured and unstructured data, making targeted decryption difficult without a key or more context.
Investigative Status and Public Updates
The St. Charles County Sheriff’s Office has periodically issued statements about the case, emphasizing ongoing review and occasional consultation with external experts. No named suspects have been publicly identified solely from the notes, and there is no official confirmation that the codes directly reveal McCormick’s cause of death or assailants. The case files remain open, with law enforcement treating the notes as potentially relevant but not yet decisive evidence.
Why the Codes Remain Unresolved
Multiple factors contribute to the enduring unsolved nature of the cipher:
- Short length by cipher standards, reducing statistical leverage
- Lack of clear formatting, such as word boundaries or punctuation
- No publicly confirmed crib words or phrases known to decrypt the text
- Contextual ambiguity about whether the notes were intended as a personal record, a warning, or something else
These challenges align with well-known difficulties in historical cryptanalysis, where successful decryption often depends on key length, language patterns, and available contextual clues.
Status Clarification: Current Understanding and Common Misconceptions
It is important to distinguish confirmed facts from speculation. The notes are real, physically recovered documents. Their exact meaning has not been officially determined. There is no verified proof that they identify a killer, reveal a conspiracy, or constitute a suicide note. Claims that the codes have been definitively solved are not supported by law enforcement disclosures or peer-reviewed analysis. The case remains an open investigation with an undeciphered component.
Enduring Questions and Public Interest
The Ricky McCormick case persists in public memory because it combines human tragedy with technical mystery. Families of missing persons, amateur and professional cryptanalysts, and true crime communities continue to examine the notes for overlooked patterns. New analysis methods from linguistics, pattern recognition, and historical cryptography may one day offer incremental insights, but as of now the notes withhold their clear meaning.
Key Facts at a Glance
| Attribute | Verified Detail | Source Type |
|---|---|---|
| Date Discovered | December 5, 1999 | Law enforcement reports |
| Location | Field near West Alton, St. Charles County, Missouri | Sheriff’s Office statements |
| Victim | Rick McCormick, age 41 | Coroner and missing persons records |
| Note 1 Length | 287 characters | FBI CARU summary |
| Note 2 Length | 340 characters | FBI CARU summary |
| Analysis Agencies | Agency FOIA and public statements | |
| Decryption Status | Unsolved; no verified plaintext | Ongoing official disclosures |
Comparison with Similar Cases
Unlike high-profile historical ciphers such as the Zimmermann Telegram or the Zodiac ciphers, the Ricky McCormick notes are brief, physically associated with a victim, and have not yielded to standard cryptanalysis methods. Unlike solved cases with clear keys or contextual breakthroughs, these notes occupy a middle ground: physically compelling but analytically resistant. This contrast helps frame expectations about what codebreaking typically requires and why some texts remain resistant to decryption.
Reliable Sources and Further Reading
Key publicly available materials include FBI records requests (FOIA) referencing CARU analysis, local law enforcement pressers, and national archives relating to missing persons and cold-case cryptography. Technical readers may consult resources on classical cryptanalysis, frequency analysis, and historical cipher examples to understand the boundaries of what has been reasonably attempted on the McCormick notes.
For individuals interested in following developments, staying updated through official channels and reputable true crime research is recommended. As of now, the notes remain a powerful symbol of how even modern analytical tools can encounter limits when historical context or keys are absent.
Tags: ricky mccormick, cipher notes, unsolved cipher, forensic cryptography, missing persons