Child Pornography Lawyer Evergreen Park, IL. Sometimes the first sign of a CSAM investigation is a knock at the door. Police may arrive with a warrant, seize your phone, computers, hard drives, or other electronics, and begin building a case around alleged child sexual abuse material before you have had a chance to understand what they think the evidence shows.
From there, the important questions become much more specific. What files were actually found? How did they get there? Were they opened or viewed? Who had access to the device or account? What does the forensic data show? And can prosecutors connect that evidence to you beyond a reasonable doubt?
People accused of possessing, distributing, producing, or otherwise being involved with child pornography or CSAM need more than the government’s version of what happened. Combs Waterkotte‘s criminal defense lawyers serving Evergreen Park, IL review the underlying evidence, how it was obtained, and what it actually proves.
If police have contacted you, searched your home, seized a device, or told you that you are the target of an investigation, call (314) 900-HELP or contact us online for a free, confidential consultation.
Cases Handled
Over 10,000
Jail Days Saved
Over 1 Million
Google Reviews
500+ Perfect
Legal Experience
100+ Years
Below, we explain:
- What qualifies as child pornography or CSAM under Illinois law
- What the State must prove to obtain a conviction under Illinois’ CSAM statute
- The felony levels, prison exposure, and other penalties tied to Illinois child pornography charges
- The role electronic devices, online accounts, IP addresses, and forensic evidence can play in these investigations
- Questions involving knowledge, possession, attribution, searches, and other issues that can weaken the prosecution’s theory
- When a child pornography investigation in Evergreen Park, IL can become a federal case
- Registration requirements and the other ways a conviction can affect your life after the criminal case ends
- How Combs Waterkotte defends complex child pornography and CSAM cases
Legal Videos

What is Grooming Under Illinois Law?
What is Grooming Under Illinois Law? Combs Waterkotte attorneys Christopher Combs and Joshua Boardman discuss everything you need to know about Illinois sex crime charges, including sexual assault …

What is Internet Solicitation of a Minor in Illinois?
What is Internet Solicitation of a Minor in Illinois? Attorneys Christopher Combs and Joshua Boardman from Combs Waterkotte discuss everything you need to know about Illinois sex crime charges …

Can I Be Charged for Sending Unsolicited Explicit Images?
Can I Be Charged for Sending Unsolicited Explicit Images? Combs Waterkotte attorneys Christopher Combs and Joshua Boardman discuss everything you need to know about Illinois sex crime charges …

What Is Unlawful Dissemination of Private Sexual Images in Illinois?
What Is Unlawful Dissemination of Private Sexual Images in Illinois? Attorneys Christopher Combs and Joshua Boardman from Combs Waterkotte discuss everything you need to know about Illinois sex …

Can Minors Be Charged for Sexting in Illinois?
Can Minors Be Charged for Sexting in Illinois? Combs Waterkotte attorneys Christopher Combs and Joshua Boardman discuss everything you need to know about Illinois sex crime charges, including …

Can Adults Be Charged for Sexting in Illinois?
Can Adults Be Charged for Sexting in Illinois? Attorneys Christopher Combs and Joshua Boardman from Combs Waterkotte discuss everything you need to know about Illinois sex crime charges, including …
What to Do During a CSAM Investigation in Evergreen Park, IL
An arrest does not have to happen before you get a criminal defense lawyer involved. In many cases, some of the most important decisions come earlier.
A request to “come in and answer a few questions” may be the first clue that you are under investigation. For someone else, it may be officers showing up in Evergreen Park, IL with a search warrant. Either way, police may already have records from internet providers, cloud accounts, social media platforms, or other online services before they ever speak with you.
If you think police are looking at you, keep these rules in mind:
- Do not answer investigators’ questions without an attorney. Questions about passwords, devices, usernames, online activity, or who uses a computer may be intended to establish knowledge or control.
- Do not consent to additional searches. If police have a warrant, do not interfere with it. That does not mean you need to give permission for searches beyond what the warrant authorizes.
- Do not delete files, accounts, messages, or browsing history. What looks damaging at first may contain information your attorney or a forensic examiner needs to understand what actually occurred.
- Do not destroy, wipe, reset, or replace a device.
- Be careful who you talk to about the accusation. Conversations with friends, coworkers, or other third parties generally are not protected the way communications with your lawyer are.
- You are not required to solve the investigation for the police. Let your lawyer deal with investigators while you first learn what evidence exists and what the government believes it shows.
People often want to clear everything up immediately. In a digital case, that can backfire. Before giving explanations about devices, accounts, downloads, or files, you need to know what the evidence actually shows and what assumptions investigators have already made.
How Illinois Law Defines Child Pornography and CSAM
Illinois child pornography charges are primarily prosecuted under 720 ILCS 5/11-20.1.
The statute covers several different forms of alleged conduct. Depending on the subsection involved, a person may be accused of:
- Producing prohibited visual material involving a minor
- Reproducing prohibited material or distributing it to others
- Offering prohibited material for distribution or exhibiting it
- Possessing prohibited material with the intent to disseminate it
- Soliciting, persuading, inducing, enticing, or coercing a minor to appear in prohibited material
- Permitting a minor in someone’s care or custody to be used in prohibited material
- Knowingly possessing prohibited material
Calling every case a “child pornography charge” can hide important differences. Illinois law treats possession allegations differently from cases involving distribution or the creation of prohibited material.
What Happens When a CSAM Case Involves AI or Manipulated Images?
Illinois law is not limited to conventional photographs and recorded video.
The statute addresses certain computer-created, adapted, or modified depictions that appear to involve a person under 18, as well as manipulated material using part of an actual child.
How the image was created may become part of the case. Digitally altered or computer-generated material can raise questions that are different from those presented by an ordinary photograph or recorded video.
The fact that an image was generated or manipulated digitally does not settle the legal question. A lawyer still needs to review the material itself and the specific statutory theory behind the charge.
Cook County Resources
Below are quick links to important websites that may assist you with your legal matters in Cook County and Illinois.
- Illinois Criminal Defense Resources
- Illinois Criminal Defense Practice Areas
- Illinois Compiled Statutes
- Illinois Courts
- Illinois Supreme Court Rules
- Illinois Secretary of State
- Illinois State Police
- Illinois Department of Corrections
- Cook County Website
- Cook County Court
- Cook County Jail
- Cook County Sheriff’s Office
- Christopher Combs
- Steven Waterkotte
What Does the State Have to Prove in a Child Pornography Case in Evergreen Park, IL?
Finding files on an electronic device is not the end of the case.
The State cannot stop at showing that material existed. It must prove each element required by the specific charge beyond a reasonable doubt.
When prosecutors pursue possession under 720 ILCS 5/11-20.1(a)(6), they must address issues including whether:
- The material meets Illinois’ statutory definition of child sexual abuse material
- The accused actually possessed the material
- The accused knew the nature or contents of the material
- Where required, the accused knew or reasonably should have known the depicted person’s age
- The possession satisfies Illinois’ requirement that it be voluntary
Illinois law specifically addresses that last point.
Under Illinois law, possession is voluntary when someone knowingly procures or receives the material and has sufficient time to end that possession. That distinction can matter when a file appears through caching, cloud synchronization, an automatic download, a messaging app, or a shared account rather than being deliberately saved.
A possession case is only one possibility. If prosecutors allege distribution, production, solicitation, or another form of conduct, they must prove the additional elements tied to that offense.
The name of the charge tells only part of the story. The charging language and the underlying forensic evidence need to be examined together.
What Penalties Can Follow a Child Pornography Charge in Evergreen Park, IL?
A CSAM charge in Evergreen Park, IL can fall into different felony classifications. The possible level depends on details such as possession versus more active conduct, the type of depiction, the child’s age, criminal history, and the subsection prosecutors use.
Illinois generally classifies possession under 720 ILCS 5/11-20.1(a)(6) as follows:
- Possession of a still photograph or another non-moving depiction is generally charged as a Class 3 felony
- Possession of moving material, such as a film or video, is generally classified as a Class 2 felony
- The charge is generally elevated to a Class 2 felony when the child depicted is under 13
That means the ordinary prison range begins at 2 to 5 years for Class 3 and 3 to 7 years for Class 2. Prior history and other statutory sentencing factors can change what happens in an individual case.
Possession is not the ceiling. Cases involving production, distribution, solicitation, or the creation of prohibited material can move into Class 1 or Class X territory, depending on the conduct and whether moving depictions are involved.
The ordinary prison ranges increase accordingly:
- Class 1 felony: 4 to 15 years
- Class X felony: 6 to 30 years
Class X exposure is especially significant because standard Illinois sentencing does not make probation available. Prior qualifying convictions may increase the sentence beyond the ordinary range as well.
Section 11-20.1 also carries mandatory minimum fines, and the required amount depends on the subsection involved.
One Investigation Can Produce Many Counts
The number of files matters.
Under Illinois law, each individual film, video, photograph, or other prohibited depiction may be charged as a separate violation. Identical copies of the same depiction do not automatically create additional possession offenses.
The difference between distinct files and duplicate copies can have a major effect when investigators recover a large amount of material.
If police report that a device contained 100 or 1,000 files, the defense should not simply accept the number printed in the report. The files need to be examined to determine which are actually distinct, which are duplicates, what they contain, where they were stored, and how they arrived there.
What Digital Evidence Can Show in a Evergreen Park, IL Child Pornography Case
Many of these cases begin online.
An investigation may develop from a report by an internet platform, information provided through the National Center for Missing & Exploited Children’s CyberTipline, activity observed on a file-sharing network, another criminal investigation, or evidence obtained from an online account.
Investigators may then seek records or search warrants involving:
- Subscriber and connection records from an internet provider
- IP addresses
- Emails and related account data
- Social media and messaging apps
- Online storage and synced cloud services
- Search history
- Records showing downloads or file transfers
- File-sharing networks and related software
- Phones, tablets, and mobile devices
- Personal and work computers
- External storage drives
- USB drives and memory cards
A forensic examination goes well beyond clicking through folders. Investigators can preserve a bit-for-bit copy of the device and analyze information that may be hidden, deleted, automatically generated, or stored by applications in the background.
Investigators may examine metadata, deleted material, browser activity, user accounts, timestamps, file locations, app data, login records, cloud-sync history, and other clues showing how a file moved through a device or account.
But a data point still has to be interpreted.
An IP address may identify a connection, not necessarily the person behind the keyboard. A file path can show where material was stored without proving who placed it there. A timestamp can establish when something happened while leaving the identity of the user open to dispute.
The police report gives you the conclusion. The defense needs to examine the data underneath it.
Questions That Can Change a Child Pornography Case in Evergreen Park, IL
No single defense applies to every CSAM case. What matters is what the evidence actually shows, what it leaves unanswered, and whether prosecutors can connect the alleged activity to the accused.
Can Prosecutors Prove You Knew About the File?
Possession cases often turn on one deceptively simple question: did the person actually know the material was there?
Files can arrive through direct downloads, messaging applications, shared folders, cloud synchronization, browsers, peer-to-peer software, and other processes. Where a file was stored, whether it was opened, how long it existed, and what surrounding activity appears on the device can help determine whether the State can prove knowing possession.
Can the State Tie the Activity to You?
A device may belong to one person while being used by several others. Ownership and actual use are not always the same thing.
The defense may need to account for everyone who could access the relevant device or account, including spouses, children, roommates, coworkers, guests, and other authorized or unauthorized users.
User profiles, account logins, passwords, timestamps, device activity, and access records can help answer who was actually using the system when the alleged conduct occurred.
What Happened on the Device and When?
Digital evidence creates a timeline, but interpreting it can be anything but straightforward.
A forensic review may help determine:
- When a file arrived
- Whether the file came from a website, app, cloud account, shared folder, or another device
- Whether it was opened
- Any later movement or copying of the file
- Whether it was deleted
- Who appeared to be logged into the device at the relevant time
- Whether syncing, caching, or other software behavior occurred without manual input
- Whether the material arrived through synchronization from another device
- What other activity occurred before and after the event
Forensic records do not belong exclusively to the prosecution. The same timeline prosecutors rely on can also expose gaps, assumptions, or inconsistencies in their theory.
Was the Digital Evidence Obtained Lawfully?
A search warrant is not a blank check, especially when phones, computers, cloud accounts, and years of personal data are involved.
A child pornography lawyer can review the warrant application, the information investigators gave the judge, the devices or accounts the warrant authorized police to search, and whether officers stayed within those limits.
If investigators crossed constitutional lines while searching, seizing evidence, or questioning the accused, the defense can ask the court to exclude evidence obtained through the unlawful search.
How Many Separate Violations Does the Evidence Actually Support?
When each distinct depiction can become another count, file identification matters.
A forensic collection may contain duplicates, thumbnails, cached files, converted copies, automatically created data, and other artifacts that inflate the raw number investigators report. The defense can examine whether each alleged count actually corresponds to a legally distinct depiction.
Does the File Qualify as CSAM Under Illinois Law?
Prosecutors still have to show that the actual material falls within the definition covered by Illinois’ CSAM statute.
Whether an image qualifies can depend on details such as the age of the person depicted, what the material shows, whether it was altered or generated digitally, and how the statute applies to that particular file.
Illinois law includes a narrow affirmative defense based on a reasonable belief that the person depicted was at least 18. It is not enough to simply say you were mistaken about age; the statute requires particular steps to have been taken beforehand to verify it.
When Does a Child Pornography Case in Evergreen Park, IL Become Federal?
A CSAM case that begins in Evergreen Park, IL can move beyond the Illinois court system.
Federal jurisdiction can come into play when a case involves internet activity crossing state lines, online services, file-sharing networks, federal investigative work, or other conduct covered by federal law.
Depending on how the investigation develops, law enforcement may include:
- Federal Bureau of Investigation (FBI)
- HSI investigators
- Federal postal inspectors
- Federal and local Internet Crimes Against Children task forces
- Local or Illinois law enforcement working alongside federal agents
At the federal level, 18 U.S.C. §2252A commonly applies to possession, receipt, and distribution offenses, while 18 U.S.C. §2251 addresses production-related conduct.
The potential punishment increases quickly in federal court.
A first-offense federal possession charge under §2252A can carry up to 10 years in prison in many cases, with a higher maximum applying to certain material involving young children. Receipt or distribution generally carries a 5-year mandatory minimum and up to 20 years, while production under §2251 generally carries 15 to 30 years in federal prison for a first conviction. Prior qualifying convictions can increase those penalties significantly.
Beyond the statute itself, federal sentencing may be shaped by the U.S. Sentencing Guidelines, along with supervised release, restitution, forfeiture, and federal sex offender registration requirements.
The distinction between possession and receipt is especially important. Conduct that someone casually describes as “possession” may be charged differently by federal prosecutors based on how the files were allegedly obtained.
Seeing federal agents on the warrant or at the door is not a minor detail. Their involvement can change where the case is prosecuted, what penalties apply, and how the defense should approach the investigation from the beginning.
Our attorneys defend serious Illinois charges and federal criminal cases, which matters when an investigation sits near the line between state and federal jurisdiction.
Registration and Long-Term Consequences of an Illinois Child Pornography Conviction
Prison is not the only concern.
A conviction under 720 ILCS 5/11-20.1 is covered by the Illinois Sex Offender Registration Act. Registration requirements can include reporting information about a person’s residence, employment, vehicles, phone numbers, email addresses, online identities, and other internet activity. Illinois law also imposes additional reporting requirements involving IP addresses for people convicted under §11-20.1.
How long registration lasts depends on the conviction and the applicable classification. For some people, the requirement can remain in place for decades or permanently.
Registration is only one consequence. A felony sex crime conviction may also affect:
- Job opportunities and workplace consequences
- Professional licenses and certifications
- Housing opportunities and restrictions
- Education
- Custody, parenting time, and visitation
- Immigration consequences for non-citizens
- Firearm rights
- Technology and internet restrictions imposed during probation, parole, or supervised release
- Personal relationships and professional reputation
Two cases carrying the same general label can lead to very different long-term consequences. The exact charge, conviction, and resolution matter.
What Sets Combs Waterkotte Apart in Evergreen Park, IL Child Pornography Cases?
A child pornography case in Evergreen Park, IL can involve far more than the files themselves. The defense may need to understand serious sex crime allegations, digital forensics, police procedure, search warrants, and how prosecutors assemble a theory from electronic evidence.
Combs Waterkotte’s team includes former prosecutors with experience handling crimes involving children, including felony jury trials and advanced training in digital investigations and computer forensic evidence through the U.S. Secret Service National Computer Forensics Institute.
That experience gives our defense team a better framework for testing claims about phones, computers, online accounts, forensic extractions, and digital timelines rather than accepting an investigator’s conclusion at face value.
Combs Waterkotte also employs an in-house investigator with a law enforcement background. That gives the defense another set of trained eyes to review evidence, trace how the investigation unfolded, locate witnesses, and question conclusions drawn in police reports.
When necessary, we can also work with forensic professionals and other experts to examine technical evidence in greater detail. The goal is to test the government’s case rather than simply accept its interpretation of the evidence.
Our clients also benefit from:
- 100+ years of combined legal experience
- Experience drawn from more than 15,000 cases
- Former prosecutors who know how charging decisions are made
- A full-time investigator with prior law enforcement experience
- Access to forensic and other expert resources when a case requires them
- Preparation for trial from the beginning, whether the case involves an Illinois felony or federal internet sex crime allegations
- 500+ five-star Google reviews
Every defense starts with the same question: what can the government prove? From there, we identify the evidence worth challenging, develop the strongest available strategy, and prepare the case for trial when necessary.
Other cases we take on in Evergreen Park, IL include:
Get Help From a CSAM Defense Lawyer in Evergreen Park, IL
If officers have seized a phone, computer, or storage device, the case may already be moving forward behind the scenes. Waiting does not slow the investigation down.
The sooner your defense team knows what was seized, what investigators are alleging, what statements were made, and which agencies are involved, the sooner we can begin evaluating the case from the other side.
We represent clients in Evergreen Park, IL and across Illinois in both state and federal child pornography and CSAM investigations.
Call (314) 900-HELP or contact our defense team online to discuss your case confidentially with a child pornography lawyer serving Evergreen Park, IL. The consultation is free.

