Child Pornography Lawyer Evanston, IL. Sometimes the first sign of a CSAM investigation is a knock at the door. Police may arrive with a warrant, seize your phone, computers, hard drives, or other electronics, and begin building a case around alleged child sexual abuse material before you have had a chance to understand what they think the evidence shows.
Once devices or accounts become part of the investigation, the case usually turns on details rather than labels. Investigators may have found files, but that does not answer who put them there, who accessed them, whether they were ever opened, or what the forensic record actually proves.
People accused of possessing, distributing, producing, or otherwise being involved with child pornography or CSAM need more than the government’s version of what happened. Combs Waterkotte‘s criminal defense lawyers serving Evanston, IL review the underlying evidence, how it was obtained, and what it actually proves.
If police have contacted you, searched your home, seized a device, or told you that you are the target of an investigation, call (314) 900-HELP or contact us online for a free, confidential consultation.
Cases Handled
Over 10,000
Jail Days Saved
Over 1 Million
Google Reviews
500+ Perfect
Legal Experience
100+ Years
Below, we explain:
- What qualifies as child pornography or CSAM under Illinois law
- The elements prosecutors must establish under 720 ILCS 5/11-20.1
- Illinois felony classifications and potential penalties
- The role electronic devices, online accounts, IP addresses, and forensic evidence can play in these investigations
- Legal and factual issues that can weaken the prosecution’s case
- When federal agencies or prosecutors may become involved in a Evanston, IL child pornography case
- How a conviction can lead to sex offender registration and other long-term consequences
- What Combs Waterkotte does to investigate, challenge, and defend complex CSAM cases
Legal Videos

What is Grooming Under Illinois Law?
What is Grooming Under Illinois Law? Combs Waterkotte attorneys Christopher Combs and Joshua Boardman discuss everything you need to know about Illinois sex crime charges, including sexual assault …

What is Internet Solicitation of a Minor in Illinois?
What is Internet Solicitation of a Minor in Illinois? Attorneys Christopher Combs and Joshua Boardman from Combs Waterkotte discuss everything you need to know about Illinois sex crime charges …

Can I Be Charged for Sending Unsolicited Explicit Images?
Can I Be Charged for Sending Unsolicited Explicit Images? Combs Waterkotte attorneys Christopher Combs and Joshua Boardman discuss everything you need to know about Illinois sex crime charges …

What Is Unlawful Dissemination of Private Sexual Images in Illinois?
What Is Unlawful Dissemination of Private Sexual Images in Illinois? Attorneys Christopher Combs and Joshua Boardman from Combs Waterkotte discuss everything you need to know about Illinois sex …

Can Minors Be Charged for Sexting in Illinois?
Can Minors Be Charged for Sexting in Illinois? Combs Waterkotte attorneys Christopher Combs and Joshua Boardman discuss everything you need to know about Illinois sex crime charges, including …

Can Adults Be Charged for Sexting in Illinois?
Can Adults Be Charged for Sexting in Illinois? Attorneys Christopher Combs and Joshua Boardman from Combs Waterkotte discuss everything you need to know about Illinois sex crime charges, including …
Under Investigation for Child Pornography in Evanston, IL? What to Do Next
You do not need to be arrested before you need a lawyer.
A request to “come in and answer a few questions” may be the first clue that you are under investigation. For someone else, it may be officers showing up in Evanston, IL with a search warrant. Either way, police may already have records from internet providers, cloud accounts, social media platforms, or other online services before they ever speak with you.
If you believe you are under investigation:
- Do not try to explain the situation to investigators on your own. Questions that sound routine, such as who knows a password or who normally uses a computer, may later be used to connect you to a device, account, or file.
- Do not give police broader permission than they already have. You should not interfere with officers executing a valid warrant, but you also do not need to voluntarily expand the search to additional devices, accounts, or locations.
- Leave the digital evidence alone. Do not start deleting messages, clearing histories, closing accounts, or removing files. Information that initially looks harmful may contain context that matters once an attorney or forensic examiner reviews it.
- Do not destroy, wipe, reset, or replace a device.
- Be careful who you talk to about the accusation. Conversations with friends, coworkers, or other third parties generally are not protected the way communications with your lawyer are.
- Let your lawyer communicate with investigators. You do not need to talk your way out of an allegation before understanding the evidence behind it.
Trying to explain a technical situation from memory can create statements that become part of the prosecution’s case. First find out what investigators have and what they are claiming it proves.
How Illinois Law Defines Child Pornography and CSAM
Most state-level CSAM prosecutions in Evanston, IL begin with 720 ILCS 5/11-20.1, Illinois’ primary child sexual abuse material statute.
The statute covers several different forms of alleged conduct. Depending on the subsection involved, a person may be accused of:
- Producing prohibited visual material involving a minor
- Reproducing or disseminating prohibited material
- Offering to share prohibited material or displaying it to others
- Possessing prohibited material while intending to distribute it
- Using solicitation, persuasion, inducement, enticement, or coercion to involve a minor in prohibited material
- Allowing a minor in someone’s care or custody to be used in prohibited material
- Knowingly possessing prohibited material
These are not interchangeable charges. Someone accused only of possession faces different statutory provisions than someone accused of producing or distributing material.
Does Illinois Law Cover AI-Generated or Altered Images?
A CSAM case in Illinois does not necessarily have to involve a traditional photo or video.
The statute addresses certain computer-created, adapted, or modified depictions that appear to involve a person under 18, as well as manipulated material using part of an actual child.
That makes the source and creation of a file potentially important. A case involving an altered digital image can present different factual and legal questions from one involving a conventional photograph or video.
The fact that an image was generated or manipulated digitally does not settle the legal question. A lawyer still needs to review the material itself and the specific statutory theory behind the charge.
Cook County Resources
Below are quick links to important websites that may assist you with your legal matters in Cook County and Illinois.
- Illinois Criminal Defense Resources
- Illinois Criminal Defense Practice Areas
- Illinois Compiled Statutes
- Illinois Courts
- Illinois Supreme Court Rules
- Illinois Secretary of State
- Illinois State Police
- Illinois Department of Corrections
- Cook County Website
- Cook County Court
- Cook County Jail
- Cook County Sheriff’s Office
- Christopher Combs
- Steven Waterkotte
What Does the State Have to Prove in a Child Pornography Case in Evanston, IL?
Finding files on an electronic device is not the end of the case.
The prosecution still has to prove the elements of the specific offense charged beyond a reasonable doubt.
For a possession charge under 720 ILCS 5/11-20.1(a)(6), the case may turn on questions such as whether:
- The material meets Illinois’ statutory definition of child sexual abuse material
- The accused had possession of the material
- The evidence shows knowledge of the material’s nature or contents
- Where required, the accused knew or reasonably should have known the depicted person’s age
- The possession was voluntary
Voluntary possession deserves particular attention because Illinois law defines what it means.
Under Illinois law, possession is voluntary when someone knowingly procures or receives the material and has sufficient time to end that possession. That distinction can matter when a file appears through caching, cloud synchronization, an automatic download, a messaging app, or a shared account rather than being deliberately saved.
A possession case is only one possibility. If prosecutors allege distribution, production, solicitation, or another form of conduct, they must prove the additional elements tied to that offense.
The name of the charge tells only part of the story. The charging language and the underlying forensic evidence need to be examined together.
Prison Exposure and Felony Levels for CSAM Charges in Evanston, IL
A CSAM charge in Evanston, IL can fall into different felony classifications. The possible level depends on details such as possession versus more active conduct, the type of depiction, the child’s age, criminal history, and the subsection prosecutors use.
When the allegation is possession under 720 ILCS 5/11-20.1(a)(6), the basic classifications are:
- A photograph or other non-moving depiction generally results in a Class 3 felony possession charge
- Possession of moving material, such as a film or video, is generally classified as a Class 2 felony
- Possession involving a child under 13 is generally a Class 2 felony
The standard Illinois sentencing range is 2 to 5 years for a Class 3 felony and 3 to 7 years for a Class 2 felony, although sentencing can change based on criminal history and other factors.
Possession is not the ceiling. Cases involving production, distribution, solicitation, or the creation of prohibited material can move into Class 1 or Class X territory, depending on the conduct and whether moving depictions are involved.
The ordinary prison ranges increase accordingly:
- Class 1 felony: 4 to 15 years
- Class X felony: 6 to 30 years
Class X exposure is especially significant because standard Illinois sentencing does not make probation available. Prior qualifying convictions may increase the sentence beyond the ordinary range as well.
Prison is not the only statutory penalty. Illinois also requires minimum fines for violations of §11-20.1, with the amount varying according to the specific charge.
How the Number of Files Can Affect a Child Pornography Case
File count can change the stakes of the case quickly.
Illinois can treat each distinct prohibited film, video, photograph, or other depiction as its own separate violation. Duplicate copies of the exact same material are treated differently and do not necessarily support additional possession counts.
The difference between distinct files and duplicate copies can have a major effect when investigators recover a large amount of material.
A police report may say investigators found hundreds or even thousands of files. That number still needs to be tested. The defense should determine which files are unique, which are duplicates, what they actually depict, where they were located, and how they ended up on the device.
What Digital Evidence Can Show in a Evanston, IL Child Pornography Case
The trail in a child pornography case often starts on the internet and works backward toward a person, account, or device.
Police may start looking at someone after receiving a platform report, a referral through the National Center for Missing & Exploited Children’s CyberTipline, information from a file-sharing investigation, evidence uncovered in another case, or records tied to an online account.
Once police identify a possible digital trail, they may seek access to records and devices such as:
- Subscriber and connection records from an internet provider
- Records tied to IP addresses
- Emails and related account data
- Social media or messaging applications
- Cloud storage
- Browser and search history
- Download activity
- Peer-to-peer file-sharing programs
- Phones, tablets, and mobile devices
- Laptop and desktop computers
- External storage drives
- USB drives and memory cards
When a device is seized, investigators can create a forensic image of its contents and examine far more than the files someone can see by opening a folder.
Investigators may examine metadata, deleted material, browser activity, user accounts, timestamps, file locations, app data, login records, cloud-sync history, and other clues showing how a file moved through a device or account.
But a data point still has to be interpreted.
An IP address may identify a connection, not necessarily the person behind the keyboard. A file path can show where material was stored without proving who placed it there. A timestamp can establish when something happened while leaving the identity of the user open to dispute.
The details matter more than the headline in the police report.
Questions That Can Change a Child Pornography Case in Evanston, IL
There is no universal defense to a child pornography charge. The useful questions come from the evidence in the individual case.
Did You Know the File Was There?
Possession cases often turn on one deceptively simple question: did the person actually know the material was there?
Files can arrive through direct downloads, messaging applications, shared folders, cloud synchronization, browsers, peer-to-peer software, and other processes. Where a file was stored, whether it was opened, how long it existed, and what surrounding activity appears on the device can help determine whether the State can prove knowing possession.
Can the State Tie the Activity to You?
A computer sitting in someone’s home is not necessarily used by only one person.
Shared access is common. Family members, roommates, coworkers, visitors, or other users may have access to phones, computers, Wi-Fi networks, cloud storage, streaming devices, or online accounts.
The defense may examine user profiles, passwords, login records, device activity, timestamps, account access, and other evidence to determine whether investigators can actually attribute the conduct to the accused.
What Happened on the Device and When?
Digital files leave trails, but those trails are not always simple.
A detailed forensic examination can help answer questions such as:
- When the file first appeared on the device
- The source of the file
- Whether anyone actually opened or viewed it
- Any later movement or copying of the file
- Whether someone attempted to delete it
- Which account was active
- Whether syncing, caching, or other software behavior occurred without manual input
- Whether the material arrived through synchronization from another device
- The surrounding activity before and after the file appeared
The prosecution may have a theory about what the data means. That theory can be tested.
Did Police Stay Within the Search Warrant?
Search warrants in digital cases deserve close scrutiny.
A child pornography lawyer can review the warrant application, the information investigators gave the judge, the devices or accounts the warrant authorized police to search, and whether officers stayed within those limits.
Evidence obtained in violation of the Fourth Amendment may be challenged through a motion to suppress.
Did Prosecutors Count the Files Correctly?
The file count can directly affect the number of charges, which makes accurate identification essential.
Duplicates, cached copies, thumbnails, converted versions, automatically generated files, and other forensic artifacts can complicate the count. The defense needs to understand exactly what prosecutors are treating as separate criminal violations and whether the evidence supports that calculation.
Does the File Qualify as CSAM Under Illinois Law?
Prosecutors still have to show that the actual material falls within the definition covered by Illinois’ CSAM statute.
The material has to meet the statutory definition. Depending on the case, questions involving the depicted person’s age, the nature of the image, how it was created, and what it actually shows may need to be litigated.
A reasonable mistake about age can matter in limited circumstances, but Illinois sets specific requirements for that affirmative defense. A bare claim that someone appeared to be over 18 is not enough on its own.
When Does a Child Pornography Case in Evanston, IL Become Federal?
State charges are not the only possibility. Some child pornography investigations in Evanston, IL develop into federal criminal cases.
Federal agencies and prosecutors may become involved when allegations concern interstate internet activity, online platforms, file-sharing networks, federal investigations, or other conduct falling within federal jurisdiction.
Depending on how the investigation develops, law enforcement may include:
- FBI agents
- Homeland Security Investigations
- Federal postal inspectors
- Internet Crimes Against Children task forces working across federal and local agencies
- State and local officers participating in a federal investigation
Federal child pornography offenses are commonly prosecuted under 18 U.S.C. §2252A, while production allegations may be prosecuted under 18 U.S.C. §2251.
The potential punishment increases quickly in federal court.
A first-offense federal possession charge under §2252A can carry up to 10 years in prison in many cases, with a higher maximum applying to certain material involving young children. Receipt or distribution generally carries a 5-year mandatory minimum and up to 20 years, while production under §2251 generally carries 15 to 30 years in federal prison for a first conviction. Prior qualifying convictions can increase those penalties significantly.
Federal cases also involve the U.S. Sentencing Guidelines, supervised release, forfeiture, restitution, and federal registration requirements.
In federal court, possession and receipt are not interchangeable labels. The way prosecutors say the files were obtained can affect which charge they pursue and the sentencing range that follows.
If federal agents are involved in a search, interview, CyberTip investigation, or device seizure, your attorney needs to identify that immediately. The procedures, sentencing exposure, and strategy can differ considerably from an Illinois state prosecution.
Our attorneys defend serious Illinois charges and federal criminal cases, which matters when an investigation sits near the line between state and federal jurisdiction.
Registration and Long-Term Consequences of an Illinois Child Pornography Conviction
The sentence is only part of what can follow a conviction.
A conviction under 720 ILCS 5/11-20.1 can trigger obligations under the Illinois Sex Offender Registration Act. Those registration requirements may require a person to report details about where they live and work, vehicles, phone numbers, email addresses, online identities, and other internet activity. People convicted under §11-20.1 can also face additional IP-address reporting rules.
Registration is not necessarily short-term. Depending on the offense and the law that applies, the obligation may last for years or continue for life.
A felony sex offense conviction can also affect:
- Current and future employment
- Professional licensing
- Housing
- Education
- Child custody and visitation
- Visa, residency, or removal issues for non-citizens
- Firearm ownership and possession rights
- Technology and internet restrictions imposed during probation, parole, or supervised release
- Personal relationships and professional reputation
Two cases carrying the same general label can lead to very different long-term consequences. The exact charge, conviction, and resolution matter.
Why Hire Combs Waterkotte for a CSAM Case in Evanston, IL?
A child pornography case in Evanston, IL can involve far more than the files themselves. The defense may need to understand serious sex crime allegations, digital forensics, police procedure, search warrants, and how prosecutors assemble a theory from electronic evidence.
Combs Waterkotte’s team includes former prosecutors with experience handling crimes involving children, including felony jury trials and advanced training in digital investigations and computer forensic evidence through the U.S. Secret Service National Computer Forensics Institute.
When prosecutors rely heavily on a device extraction or forensic report, our attorneys know the right questions to ask: what the data actually proves, what assumptions were made, and where the government’s interpretation may be vulnerable.
An in-house investigator who previously worked in law enforcement can help our attorneys dig deeper into the case, from witness development and evidence review to examining the steps police took before recommending charges.
If the case turns on highly technical evidence, our team can work with forensic specialists and other experts. The point is simple: the government’s interpretation should be tested, not treated as unquestionable.
Our clients also benefit from:
- A legal team with more than a century of combined experience
- More than 15,000 cases handled
- Former prosecutors who know how charging decisions are made
- An in-house investigator with a law enforcement background
- The ability to involve forensic professionals and other experts when needed
- Trial-ready representation for serious felony and federal internet sex crime charges
- 500+ five-star Google reviews
Every defense starts with the same question: what can the government prove? From there, we identify the evidence worth challenging, develop the strongest available strategy, and prepare the case for trial when necessary.
Other cases we take on in Evanston, IL include:
Talk to a Evanston, IL Child Pornography Lawyer About Your Case
Once law enforcement has your devices, the clock is already moving. Investigators may be reviewing data and building their theory while you are still trying to understand what happened.
Early involvement gives the defense more time to learn what police took, what they believe the evidence shows, which statements are already in the record, and whether state or federal agencies are involved.
Combs Waterkotte represents people in Evanston, IL and throughout Illinois who are facing child pornography and child sexual abuse material investigations in state and federal court.
Call (314) 900-HELP or contact our defense team online to discuss your case confidentially with a child pornography lawyer serving Evanston, IL. The consultation is free.

