Ricky McCormick Notes: Meaning, Origins, and Why They Still Confuse Investigators

In 1999, two children hiking near a Missouri creek stumbled across a scrap of paper that would become one of America’s most enduring cryptographic mysteries: the Ricky McCormick notes. Found in a field, the handwritten sheets contained dense clusters of letters, symbols, and numbers that appear to be a personal cipher rather than a public code. Despite decades of analysis by professional cryptanalysts, law enforcement, and hobbyists, the Ricky McCormick notes have never been definitively decoded, and their link to a real person has never been proven. This evergreen explainer outlines what the notes contain, how they were discovered, the investigative steps taken so far, and why they remain significant for both codebreaking and missing-person research.

What the Ricky McCormick Notes Actually Say

The Ricky McCormick notes consist of two separate sheets of paper covered in dense strings of letters, short phrases, and numbers, separated by symbols and occasional line breaks. The text mixes all-caps words with lowercase strings and includes recurring patterns that suggest a substitution or transposition system, but no consistent cipher key has been confirmed. Analysts have noted apparent fragments of dictionary words, possible names, and what could be dates or coordinate-like pairs, yet the overall structure resists classification as a known cipher. Because the author used nonstandard formatting and mixed character sets, automated solvers and manual efforts alike have produced only partial, inconclusive matches.

Context and Content

Unlike formal encryption protocols, the Ricky McCormick notes appear to be a personal system, possibly a private shorthand or code invented for quick, private communication. The mixture of recognizable fragments and opaque strings suggests the writer intended at least some readers to grasp parts of the message, while keeping the full meaning accessible only to a trusted recipient. This pattern is common in cases where ordinary people, rather than trained cryptographers, create ad hoc ciphers driven by immediate personal needs. The fact that no plaintext has been universally accepted means that interpretations remain speculative, and any claimed ‘decryption’ should be treated as a hypothesis rather than a definitive solution.

Discovery and Early Investigation

The Ricky McCormick notes were discovered in a field in St. Charles County, Missouri, in November 1999 by two children who recognized that the paper might be connected to a recent missing-person case. The notes were found alongside no obvious physical context—no envelope, no nearby identification, and no clear scene indicators—so investigators initially treated them as potential evidence tied to an unknown subject. Local authorities photographed and preserved the sheets, sending them to state laboratories and requesting assistance from federal partners, which marked the beginning of sustained analytical interest.

First Examinations

Early handwriting comparisons and linguistic checks found no obvious match to missing persons in regional databases, and attempts to link the paper to known suspects produced no actionable leads. Analysts noted that the content included recurring patterns that could be names, places, or dates, but none could be confirmed without a decryption key. At this stage, the notes transitioned from a curious find to an active investigative artifact, prompting wider distribution among professional cryptanalysts while maintaining the original chain of custody.

Analytical Approaches and Methods

Over time, the Ricky McCormick notes have been subjected to classical cryptanalysis techniques, including frequency analysis, pattern matching, and automated constraint solvers, as well as informal crowdsourcing efforts. Because the text is short and lacks a known crib word or standard format, results have been necessarily inconclusive. Investigators and hobbyists typically compare partial hypotheses against the original images, testing whether common abbreviations, date formats, or geographic references can explain the clusters of characters.

Key Attributes of the Notes

Public Interest and Crowdsourcing

The Ricky McCormick notes gained rapid public attention because they appeared to offer an accessible puzzle: an unexplained handwritten message with a seemingly real-world subject. Online forums, amateur codebreakers, and journalists shared image files, proposed translations, and speculative connections, which sometimes converged on similar partial readings but never on a coherent whole. This crowdsourcing approach produced a steady stream of hypotheses, yet none met the evidentiary threshold required for official conclusions. The episode illustrates both the power and limits of distributed problem-solving when formal cryptographic expertise and verified chain-of-custody processes are limited.

Why Interpretations Diverge

Divergent interpretations arise because the notes contain enough familiar letter combinations to invite pattern-matching, while lacking enough context to confirm any single reading. Human tendency to see meaning—in this case, names, dates, or locations—can lead multiple analysts to favor different segmentations or substitutions from the same raw string. Without a known plaintext anchor or a confirmed author, each hypothesis remains tentative, and apparently supporting ‘clues’ often reflect confirmatory bias rather than systematic decryption.

Law Enforcement and Official Statements

Status and Ongoing Investigations

As of the latest available statements from Missouri law enforcement and partner agencies, the Ricky McCormick notes remain officially unsolved, with no verified decryption accepted for use in active investigations. Investigators periodically revisit the case when new analytical tools or public tips emerge, but no forensic or linguistic breakthrough has met the threshold for formal evidentiary use. The notes are treated as an open investigative artifact rather than a confirmed clue, meaning that while they may inform broader research into personal cipher practices, they have not resolved the specific missing-person question that prompted their discovery.

Current Standing

• No confirmed plaintext or accepted decryption exists in public records.
• Law enforcement continues to store and protect the original sheets under standard evidence protocols.
• Periodic expert reviews assess new methodologies without altering the case’s unresolved status.
• Public hypotheses continue to circulate, but none have been officially incorporated into investigative files.

Methodological Lessons and Takeaways

The Ricky McCormick case highlights core principles for evaluating mysterious ciphers and missing-person investigations: prioritize verified chain of custody, favor peer-reviewed analytical methods over anecdotal claims, and clearly distinguish working hypotheses from confirmed findings. For researchers, the notes demonstrate why short, nonstandard texts are especially challenging for classical cryptanalysis, and why context—such as expected message format, author background, and temporal factors—is essential for narrowing plausible interpretations. For the public, the enduring mystery underscores the gap between compelling imagery and solvable encryption, and it reinforces the importance of transparent communication about uncertainty in complex investigations.

Practical Guidance

• Preserve original media and documentation to maintain evidentiary integrity.
• Use standardized notation when publishing ciphertext images to support independent analysis.
• Clearly label any proposed decryption as speculative until corroborated by multiple expert reviews.
• Correlate cipher analysis with timeline, geography, and biographical data for missing-person cases.
• Document negative results and failed hypotheses to avoid redundant efforts and confirmation bias.