Who Betrayed the Gunpowder Plot?
“Burn the Letter”
An unsigned warning reached Lord Monteagle ten days before the planned attack on Parliament. Its author remains uncertain, but its wording reveals a dangerous conflict of loyalties.
On 26 October 1605, Lord Monteagle received a letter advising him to avoid the approaching opening of Parliament. The message offered no signature and named no conspirators. It warned of danger, urged him to withdraw to the countryside and told him to burn the evidence.
Who sent it remains unresolved. Francis Tresham, a member of the Gunpowder Plot conspiracy and Monteagle’s brother-in-law, is the leading candidate in Parliament’s historical account. That is a reasoned attribution, not an established identification.
The distinction matters because the letter has two histories. One concerns what it helped bring about: the discovery of a planned attack on the king and Parliament. The other concerns a person who successfully concealed their identity.
The first can be reconstructed much more confidently than the second.
A Warning Designed to Leave Questions Unanswered
The surviving letter is striking for what it withholds. It does not mention Guy Fawkes, identify a store of explosives or describe how the attack would work. Instead, it presents withdrawal as the sensible response to knowledge the writer will not fully disclose.
Its most famous phrase promises a “terrible blow”. Another instruction concerns what should happen to the document itself: “burnt the letter”. The original survives in The National Archives because Monteagle did not follow that instruction.
Read as a communication rather than a historical relic, its structure is revealing. The writer needs Monteagle to believe enough to act, while learning little enough to leave the sender protected.
That creates a problem. A vague warning can be dismissed. A detailed warning can expose its source. The letter occupies the dangerous space between them, giving a place and an occasion while withholding the people and method.
Its religious language also does work. The threatened event is presented as punishment for the wickedness of the age. That framing may have been intended to justify the coming violence, strengthen the warning’s authority or make it intelligible to its recipient.
It cannot, by itself, identify the writer. A person could use language sincerely, strategically or under someone else’s direction.
Monteagle Made the Decisive Choice
Monteagle received the warning at his house in Hoxton, north London, and passed it to Robert Cecil, Earl of Salisbury, James I’s principal minister. A private communication thereby became information available to the government.
That choice deserves more attention than it usually receives.
The writer’s stated instruction was personal: stay away. Monteagle’s response widened the consequences. Rather than simply protect himself, he put others in a position to investigate the danger.
This does not establish what he privately suspected or whether he recognised the source. It establishes what he did with the warning.
There is a useful distinction between receiving information and controlling its effects. Whoever arranged the letter could choose its language and recipient. Once delivered, however, it could be copied, discussed, interpreted or handed to people the sender had hoped to avoid.
The instruction to destroy it suggests an effort to limit that risk. Monteagle’s decision defeated the instruction.
Why Francis Tresham Became the Leading Suspect
Tresham supplies a plausible combination of access and personal interest.
He was related to the conspiracy’s organiser, Robert Catesby, and joined the secret only in October 1605. His father’s recent death had made him potentially useful as a source of money. The conspirators had nevertheless been wary of trusting him.
He was also Monteagle’s brother-in-law. That relationship provides an obvious explanation for why someone involved in the plot might try to keep this particular peer away from Parliament.
Parliament’s biography records that Tresham later claimed to have tried to stop the conspiracy. When challenged about the letter on 1 November, however, he denied sending it. After the plot’s discovery, he was arrested on 12 November and died from illness in the Tower of London on 23 December.
The case is persuasive at the level of possibility. He knew something worth warning about, had a connection to the recipient and had reasons to fear the proposed attack.
But those elements do not amount to a signed admission or a demonstrated chain of delivery.
A motive helps explain an action if the action can be attributed to someone. It cannot carry the entire burden of attribution itself. Many historical mysteries become deceptively simple when a convincing motive is treated as proof.
Writing, Sending and Knowing Are Different Things
Even the question “Who wrote the letter?” contains several possibilities.
It might mean the person whose hand formed the words. It might mean the person who composed the message. Or it might mean whoever decided Monteagle should receive a warning and arranged for it to happen.
Those roles need not belong to one individual.
This is an analytical distinction, not evidence that several people participated. Its value is to prevent an answer about one role being mistaken for an answer about all of them.
A handwriting identification, if securely established, would concern the physical writer. Evidence that someone wanted Monteagle protected would concern motive. Evidence of a messenger’s instructions could connect intention to delivery.
The surviving uncertainty lies partly in the missing links between those categories.
The Folger Shakespeare Library’s catalogue illustrates the caution required. Its record for an early copy attributes the letter to Francis Tresham with a question mark, while recording other historical attributions, including Christopher Wright and Thomas Percy. The catalogue preserves disagreement rather than resolving it.
A name attached to a manuscript copy can therefore be a scholarly attribution. It is not necessarily a signature carried over from the original.
Could the Government Have Arranged It?
An alternative explanation places the letter within government intelligence rather than treating it as an unsolicited warning from a troubled conspirator.
Parliament’s account acknowledges suggestions that someone connected with the government, possibly Salisbury himself, was responsible. It also distinguishes earlier indications of a conspiracy from the clearer intelligence supplied by the letter.
This possibility requires careful handling because several different claims can become compressed into one.
A minister might receive advance intelligence. He might protect an informant’s identity. He might influence how a warning was presented. Those possibilities are distinct from inventing the conspiracy itself.
Evidence supporting one would not automatically support the others.
The fact that a government benefited politically from exposing an attack does not prove that it organised the attack. Equally, the existence of a real threat would not establish that every detail of the official discovery narrative was complete.
The responsible approach is to ask what particular evidence a theory explains and what additional assumptions it requires. A theory becomes weaker when every missing document, denial or inconsistency is made to count in its favour.
For the Monteagle letter, government involvement remains an interpretation to examine, not a solved secret to announce.
The Plotters Learned That Their Secret Was Leaking
The warning did not remain unknown to the conspirators. News reached them through a servant in Monteagle’s household, and suspicion fell on Tresham.
They considered abandoning the operation but continued. Salisbury’s apparently restrained reaction may have helped avoid driving them into immediate flight, although that explanation concerns his likely strategy rather than a directly observable private intention.
This episode changes the character of the story.
The conspirators were not simply overtaken by information they had no opportunity to assess. They knew there had been a breach. What they could not securely know was how much the authorities had understood or what would happen next.
A secret operation depends on beliefs about other people’s knowledge. Once a warning escapes, those beliefs become harder to maintain. Silence from the authorities can mean disbelief, ignorance, preparation or surveillance.
Continuing therefore required the plotters to accept uncertainty about the most important condition of their plan: whether they could remain undetected until Parliament assembled.
Their decision does not reveal exactly what each man thought. It shows that discovery was preceded by a choice to proceed despite a recognised danger.
From an Anonymous Message to Physical Evidence
During the night of 4–5 November, the investigation reached the person and materials needed for the attack. Guy Fawkes, using the name John Johnson, was found with the gunpowder beneath the House of Lords.
The parliamentary record describes 36 barrels and a purpose to destroy the king and those assembled with him. The warning had now been followed by evidence of an immediate physical threat.
That transition explains why the letter mattered without requiring it to contain a complete solution.
An intelligence lead can be useful before its author is identified. Officials did not need to settle the historical mystery that still interests us. They needed to investigate whether the threatened event could happen.
For a broader account of the conspiracy’s aims, the proposed uprising and the consequences of a successful explosion, see what the Gunpowder Plot was intended to achieve.
The narrower question here is how a message became actionable. Its significance lay in directing attention towards a particular gathering before the intended victims arrived.
The discovery then supplied something the letter had deliberately omitted: the means.
A Personal Warning Was Not Necessarily an Attempt to Save Everyone
It is tempting to imagine the anonymous sender as someone who decided to rescue the king. The document does not establish that intention.
Its immediate request concerned Monteagle’s safety. A person could oppose the whole conspiracy, want to protect one relative, fear the consequences for their community or seek to expose the plot indirectly. Those motives might overlap, but they should not be treated as interchangeable.
The letter’s wording cannot settle which was decisive.
This gives the story a more difficult moral shape than a simple contest between loyalty and betrayal. Warning a potential victim might frustrate a planned atrocity. It might also be an attempt to make an exception while leaving others exposed.
The eventual benefit of an action does not prove that its author intended the entire result.
Monteagle’s decision to pass the message on is therefore essential to understanding its consequences. A warning framed around one person’s survival helped create the conditions for a much wider intervention.
What Would Actually Solve the Mystery?
A stronger answer would require evidence connecting a person to the message more directly than motive or association.
An authenticated contemporary admission could matter. So could reliable correspondence arranging its delivery, or independent testimony that established how the warning passed from its source to Monteagle.
Any discovery would still need scrutiny. When was the record created? Who produced it? Did its author witness the event, repeat a rumour or have a reason to mislead?
A later attribution would not become contemporary evidence merely because it was old.
Until such a connection can be established, the most useful conclusion has two parts: Tresham is a credible leading candidate, and the sender remains unidentified.
That uncertainty does not diminish the surviving document. It makes its achievement more remarkable. The letter communicated enough to endanger a conspiracy while withholding enough to protect the identity behind it.
The writer asked for the paper to disappear. More than four centuries later, the paper survives—and the name does not.
Sources
UK Parliament — Parliament Receives a Tip-Off — Delivery, government response and competing authorship suggestions.
UK Parliament — Francis Tresham — His involvement, denial, arrest and death.
UK Parliament — Discovery and Flight — The conspirators’ response and discovery of Fawkes.
The National Archives — The Monteagle Letter — Original document and transcription; text available through the search index.
Folger Shakespeare Library — Copy of the Letter to Lord Monteagle — Catalogue description recording uncertain and competing attributions; consulted through indexed text.
