Child Pornography Lawyer Northbrook, IL. When police believe illegal images or videos like CSAM are connected to your phone, computer, cloud account, or internet connection, the investigation can move quickly. A search warrant may result in officers leaving your home with computers, phones, storage drives, and other electronics before you fully understand what they believe happened.
Once devices or accounts become part of the investigation, the case usually turns on details rather than labels. Investigators may have found files, but that does not answer who put them there, who accessed them, whether they were ever opened, or what the forensic record actually proves.
Combs Waterkotte‘s Northbrook, IL criminal defense lawyers represent people throughout Illinois who are under investigation or facing charges involving possession, distribution, production, and other allegations involving child pornography or CSAM. Our attorneys examine the evidence behind the accusation rather than accepting the government’s interpretation of it.
You do not have to wait for charges to be filed. If police have searched your home, taken an electronic device, or identified you as the subject of a CSAM investigation, call (314) 900-HELP or reach out to our firm online for a free, confidential consultation.
Cases Handled
Over 10,000
Jail Days Saved
Over 1 Million
Google Reviews
500+ Perfect
Legal Experience
100+ Years
Below, we explain:
- What Illinois considers child pornography or child sexual abuse material
- What prosecutors have to prove under 720 ILCS 5/11-20.1
- Illinois felony classifications and potential penalties
- How investigators use phones, computers, cloud accounts, IP records, and other digital evidence
- Questions involving knowledge, possession, attribution, searches, and other issues that can weaken the prosecution’s theory
- Why some CSAM investigations in Northbrook, IL move from state court into the federal system
- Sex offender registration and other consequences of a conviction
- What Combs Waterkotte does to investigate, challenge, and defend complex CSAM cases
Legal Videos
What is Grooming Under Illinois Law?
What is Grooming Under Illinois Law? Combs Waterkotte attorneys Christopher Combs and Joshua Boardman discuss everything you need to know about Illinois sex crime charges, including sexual assault …
What is Internet Solicitation of a Minor in Illinois?
What is Internet Solicitation of a Minor in Illinois? Attorneys Christopher Combs and Joshua Boardman from Combs Waterkotte discuss everything you need to know about Illinois sex crime charges …
Can I Be Charged for Sending Unsolicited Explicit Images?
Can I Be Charged for Sending Unsolicited Explicit Images? Combs Waterkotte attorneys Christopher Combs and Joshua Boardman discuss everything you need to know about Illinois sex crime charges …
What Is Unlawful Dissemination of Private Sexual Images in Illinois?
What Is Unlawful Dissemination of Private Sexual Images in Illinois? Attorneys Christopher Combs and Joshua Boardman from Combs Waterkotte discuss everything you need to know about Illinois sex …
Can Minors Be Charged for Sexting in Illinois?
Can Minors Be Charged for Sexting in Illinois? Combs Waterkotte attorneys Christopher Combs and Joshua Boardman discuss everything you need to know about Illinois sex crime charges, including …
Can Adults Be Charged for Sexting in Illinois?
Can Adults Be Charged for Sexting in Illinois? Attorneys Christopher Combs and Joshua Boardman from Combs Waterkotte discuss everything you need to know about Illinois sex crime charges, including …
What is Grooming Under Illinois Law?
What is Grooming Under Illinois Law? Combs Waterkotte attorneys Christopher Combs and Joshua Boardman discuss everything you need to know about Illinois sex crime charges, including sexual assault …
What is Internet Solicitation of a Minor in Illinois?
What is Internet Solicitation of a Minor in Illinois? Attorneys Christopher Combs and Joshua Boardman from Combs Waterkotte discuss everything you need to know about Illinois sex crime charges …
Can I Be Charged for Sending Unsolicited Explicit Images?
Can I Be Charged for Sending Unsolicited Explicit Images? Combs Waterkotte attorneys Christopher Combs and Joshua Boardman discuss everything you need to know about Illinois sex crime charges …
What Is Unlawful Dissemination of Private Sexual Images in Illinois?
What Is Unlawful Dissemination of Private Sexual Images in Illinois? Attorneys Christopher Combs and Joshua Boardman from Combs Waterkotte discuss everything you need to know about Illinois sex …
Can Minors Be Charged for Sexting in Illinois?
Can Minors Be Charged for Sexting in Illinois? Combs Waterkotte attorneys Christopher Combs and Joshua Boardman discuss everything you need to know about Illinois sex crime charges, including …
Can Adults Be Charged for Sexting in Illinois?
Can Adults Be Charged for Sexting in Illinois? Attorneys Christopher Combs and Joshua Boardman from Combs Waterkotte discuss everything you need to know about Illinois sex crime charges, including …
Under Investigation for Child Pornography in Northbrook, IL? What to Do Next
You do not need to be arrested before you need a lawyer.
You may not know an investigation exists until detectives contact you or officers appear with a warrant. By that point, law enforcement could already have account records, provider information, cloud data, social media activity, or other digital evidence they believe connects you to the allegation.
If you think police are looking at you, keep these rules in mind:
- Talk to a lawyer before you talk to police. Investigators may ask about usernames, passwords, devices, downloads, or internet activity because they are trying to establish who knew about or controlled the material.
- Do not consent to additional searches. If police have a warrant, do not interfere with it. That does not mean you need to give permission for searches beyond what the warrant authorizes.
- Preserve what is there. Deleting an account, conversation, file, or browser history can create new problems and may destroy information your defense could have used to reconstruct what happened.
- Do not destroy, wipe, reset, or replace a device.
- Do not discuss the investigation with friends, coworkers, or other people who could later become witnesses.
- Put your attorney between you and the investigation. Your lawyer can find out what police want and handle communications without forcing you to improvise answers about evidence you have not even seen.
People often want to clear everything up immediately. In a digital case, that can backfire. Before giving explanations about devices, accounts, downloads, or files, you need to know what the evidence actually shows and what assumptions investigators have already made.
Understanding Illinois Child Sexual Abuse Material Laws
Illinois child pornography charges are primarily prosecuted under 720 ILCS 5/11-20.1.
What prosecutors charge depends on what they claim actually happened. Under the statute, allegations can involve:
- Making or producing prohibited photographs, videos, or other depictions
- Reproducing prohibited material or distributing it to others
- Offering prohibited material for distribution or exhibiting it
- Possessing prohibited material with the intent to disseminate it
- Soliciting, persuading, inducing, enticing, or coercing a minor to appear in prohibited material
- Permitting a minor in someone’s care or custody to be used in prohibited material
- Knowingly possessing material prohibited by the statute
The distinction matters. A case involving possession is not charged the same way as an allegation involving production, distribution, or solicitation.
What Happens When a CSAM Case Involves AI or Manipulated Images?
Illinois’ definition is broader than traditional photographs or videos.
The law reaches some forms of computer-created or manipulated material, including certain depictions that appear to involve a minor and altered material incorporating part of a real child.
How the image was created may become part of the case. Digitally altered or computer-generated material can raise questions that are different from those presented by an ordinary photograph or recorded video.
An AI-generated or altered image does not automatically fall outside Illinois law. What the file depicts, how it was created, and which subsection prosecutors are relying on all need to be examined.
Cook County Resources
Below are quick links to important websites that may assist you with your legal matters in Cook County and Illinois.
- Illinois Criminal Defense Resources
- Illinois Criminal Defense Practice Areas
- Illinois Compiled Statutes
- Illinois Courts
- Illinois Supreme Court Rules
- Illinois Secretary of State
- Illinois State Police
- Illinois Department of Corrections
- Cook County Website
- Cook County Court
- Cook County Jail
- Cook County Sheriff’s Office
- Christopher Combs
- Steven Waterkotte
What Must Prosecutors Prove in a Northbrook, IL Child Pornography Case?
Finding files on an electronic device is not the end of the case.
The State cannot stop at showing that material existed. It must prove each element required by the specific charge beyond a reasonable doubt.
In a possession case under 720 ILCS 5/11-20.1(a)(6), important issues include whether:
- The material actually qualifies as CSAM under Illinois law
- The accused had possession of the material
- The accused knew the nature or contents of the material
- The State can establish the required knowledge concerning the age of the person depicted, when that issue applies
- The possession satisfies Illinois’ requirement that it be voluntary
That final issue is spelled out directly in Illinois law.
Under Illinois law, possession is voluntary when someone knowingly procures or receives the material and has sufficient time to end that possession. That distinction can matter when a file appears through caching, cloud synchronization, an automatic download, a messaging app, or a shared account rather than being deliberately saved.
A possession case is only one possibility. If prosecutors allege distribution, production, solicitation, or another form of conduct, they must prove the additional elements tied to that offense.
Start with the actual charge, then look at the forensic evidence supporting it. Both matter.
Prison Exposure and Felony Levels for CSAM Charges in Northbrook, IL
Child pornography or CSAM offenses under Illinois law are felonies, but the felony classification depends on the conduct alleged, the type of material involved, the age of the child depicted, prior qualifying convictions, and other statutory factors.
Illinois generally classifies possession under 720 ILCS 5/11-20.1(a)(6) as follows:
- A photograph or other non-moving depiction generally results in a Class 3 felony possession charge
- A film, video, or other moving depiction generally raises possession to a Class 2 felony
- If the material depicts a child under 13, possession is generally a Class 2 felony
The standard Illinois sentencing range is 2 to 5 years for a Class 3 felony and 3 to 7 years for a Class 2 felony, although sentencing can change based on criminal history and other factors.
Allegations involving production, dissemination, solicitation, or the use of a minor in creating the material can carry substantially greater exposure. Depending on the conduct and whether the allegation involves a moving depiction, the offense may be charged as a Class 1 felony or Class X felony.
For those felony levels, the standard Illinois ranges are:
- Class 1 felony: 4 to 15 years
- Class X felony: 6 to 30 years
Class X felonies are not probationable under the standard Illinois sentencing statute. Qualifying prior convictions can also result in enhanced punishment.
Section 11-20.1 also carries mandatory minimum fines, and the required amount depends on the subsection involved.
Why One CSAM Investigation Can Lead to Multiple Charges
File count can change the stakes of the case quickly.
Illinois law provides that each individual film, video, photograph, or other prohibited depiction can constitute a separate violation. Identical copies of the same depiction are treated differently and do not automatically create separate possession offenses.
That distinction can become enormous in a case involving a large forensic collection.
“1,000 files found” sounds definitive in a report. It may not be. A proper review looks at whether those files are distinct, duplicated, automatically created, stored in different locations, or tied to different sources before accepting the prosecution’s count at face value.
What Digital Evidence Can Show in a Northbrook, IL Child Pornography Case
A large number of CSAM investigations start with online activity rather than an in-person complaint.
Police may start looking at someone after receiving a platform report, a referral through the National Center for Missing & Exploited Children’s CyberTipline, information from a file-sharing investigation, evidence uncovered in another case, or records tied to an online account.
Once police identify a possible digital trail, they may seek access to records and devices such as:
- Internet service provider records
- IP address information
- Emails and related account data
- Social media and messaging apps
- Cloud storage
- Search history
- Download records
- Peer-to-peer and file-sharing software
- Phones, tablets, and mobile devices
- Laptop and desktop computers
- External hard drives
- USB devices and memory cards
A forensic examination goes well beyond clicking through folders. Investigators can preserve a bit-for-bit copy of the device and analyze information that may be hidden, deleted, automatically generated, or stored by applications in the background.
The resulting data may show file paths, timestamps, browser records, deleted files, account details, application activity, metadata, login history, cloud synchronization, and when files were created, moved, accessed, or modified.
None of those data points explain themselves.
An IP address can lead investigators to a particular internet connection without necessarily identifying the person who performed an action. A file may exist on a computer without answering who put it there. A timestamp can show when something occurred on the device while leaving other questions about the user unresolved.
The police report gives you the conclusion. The defense needs to examine the data underneath it.
Questions That Can Change a Child Pornography Case in Northbrook, IL
There is no universal defense to a child pornography charge. The useful questions come from the evidence in the individual case.
Was the Alleged Possession Knowing?
Possession cases often turn on one deceptively simple question: did the person actually know the material was there?
The path a file took onto a device can be critical. Investigators may need to distinguish an intentional download from a synced folder, an automatically saved attachment, cached material, or content placed there by someone else. File location, access history, timestamps, and surrounding activity can all bear on whether the State can prove knowledge.
Can the State Tie the Activity to You?
A device may belong to one person while being used by several others. Ownership and actual use are not always the same thing.
The defense may need to account for everyone who could access the relevant device or account, including spouses, children, roommates, coworkers, guests, and other authorized or unauthorized users.
User profiles, account logins, passwords, timestamps, device activity, and access records can help answer who was actually using the system when the alleged conduct occurred.
What Happened on the Device and When?
Digital files leave trails, but those trails are not always simple.
A detailed forensic examination can help answer questions such as:
- The date and time the file reached the device
- The source of the file
- Whether it was opened
- Whether the file was transferred, copied, or relocated
- Whether someone attempted to delete it
- Which account was active
- Whether an application or operating system acted automatically
- Whether another phone, computer, or cloud account caused the file to appear
- What the user was doing around the same time
The government’s interpretation is still an interpretation. A defense review can test whether the underlying data actually supports the story prosecutors are telling.
Was the Search Legal?
Digital searches can sweep through enormous amounts of private information, which makes the scope and execution of the warrant especially important.
The defense can examine what police told the judge to obtain the warrant, what devices or accounts the judge actually authorized them to search, and whether investigators went further than the warrant allowed.
If investigators crossed constitutional lines while searching, seizing evidence, or questioning the accused, the defense can ask the court to exclude evidence obtained through the unlawful search.
Did Prosecutors Count the Files Correctly?
The file count can directly affect the number of charges, which makes accurate identification essential.
Duplicates, cached copies, thumbnails, converted versions, automatically generated files, and other forensic artifacts can complicate the count. The defense needs to understand exactly what prosecutors are treating as separate criminal violations and whether the evidence supports that calculation.
Does the Material Actually Meet the Statute?
Prosecutors still have to show that the actual material falls within the definition covered by Illinois’ CSAM statute.
The file itself matters. Questions about age, content, digital manipulation, how the depiction was created, and what the image actually shows can all affect whether §11-20.1 applies.
Illinois law includes a narrow affirmative defense based on a reasonable belief that the person depicted was at least 18. It is not enough to simply say you were mistaken about age; the statute requires particular steps to have been taken beforehand to verify it.
What Makes a Child Pornography Case in Northbrook, IL a Federal Case?
State charges are not the only possibility. Some child pornography investigations in Northbrook, IL develop into federal criminal cases.
Federal jurisdiction can come into play when a case involves internet activity crossing state lines, online services, file-sharing networks, federal investigative work, or other conduct covered by federal law.
Cases may involve agencies such as:
- FBI agents
- Homeland Security Investigations
- The U.S. Postal Inspection Service
- Federal and local Internet Crimes Against Children task forces
- State and local officers participating in a federal investigation
Many federal possession, receipt, and distribution cases are charged under 18 U.S.C. §2252A. Allegations involving production are often prosecuted under 18 U.S.C. §2251.
Federal charges can bring substantial mandatory minimums and prison exposure.
For many first-offense possession cases under §2252A, the statutory maximum is 10 years, with a higher maximum in certain cases involving particularly young children. Receipt or distribution generally carries 5 to 20 years in federal prison, while a first production conviction under §2251 generally carries 15 to 30 years. Prior qualifying convictions can raise the stakes even further.
Federal cases also involve the U.S. Sentencing Guidelines, supervised release, forfeiture, restitution, and federal registration requirements.
The distinction between possession and receipt is especially important. Conduct that someone casually describes as “possession” may be charged differently by federal prosecutors based on how the files were allegedly obtained.
Seeing federal agents on the warrant or at the door is not a minor detail. Their involvement can change where the case is prosecuted, what penalties apply, and how the defense should approach the investigation from the beginning.
Because Combs Waterkotte handles Illinois prosecutions as well as federal criminal defense, our attorneys can evaluate whether a case is likely to remain in state court or move into the federal system.
Registration and Long-Term Consequences of an Illinois Child Pornography Conviction
Prison is not the only concern.
Under the Illinois Sex Offender Registration Act, a conviction under 720 ILCS 5/11-20.1 can create extensive reporting obligations. Depending on the case, that may include information about a person’s residence, job, vehicles, telephone numbers, email addresses, online accounts, and other internet activity, along with additional IP-address reporting requirements tied to §11-20.1 convictions.
Registration is not necessarily short-term. Depending on the offense and the law that applies, the obligation may last for years or continue for life.
Beyond registration and incarceration, a serious Illinois sex offense conviction can create problems involving:
- Current and future employment
- Professional licensing
- Housing
- Education
- Child custody and visitation
- Immigration consequences for non-citizens
- Firearm ownership and possession rights
- Internet and computer access while under court supervision
- Personal relationships and professional reputation
The consequences are different from one case to another, which is another reason the exact charge and possible resolution matter.
What Sets Combs Waterkotte Apart in Northbrook, IL Child Pornography Cases?
A child pornography case in Northbrook, IL can involve far more than the files themselves. The defense may need to understand serious sex crime allegations, digital forensics, police procedure, search warrants, and how prosecutors assemble a theory from electronic evidence.
Combs Waterkotte’s team includes former prosecutors with experience handling crimes involving children, including felony jury trials and advanced training in digital investigations and computer forensic evidence through the U.S. Secret Service National Computer Forensics Institute.
That background helps our attorneys evaluate what investigators claim a computer, phone, account, or forensic extraction proves, and identify where the evidence may be incomplete, overstated, or open to challenge.
An in-house investigator who previously worked in law enforcement can help our attorneys dig deeper into the case, from witness development and evidence review to examining the steps police took before recommending charges.
Some cases call for additional technical review. When they do, we can bring in forensic professionals or other experts to examine the evidence more closely and challenge conclusions that do not hold up under scrutiny.
Beyond the digital-forensics and investigative capabilities, Combs Waterkotte offers:
- A legal team with more than a century of combined experience
- 15,000+ criminal cases handled
- Former prosecutors who understand charging decisions from the other side
- A full-time investigator with prior law enforcement experience
- Access to forensic and other expert resources when a case requires them
- Preparation for trial from the beginning, whether the case involves an Illinois felony or federal internet sex crime allegations
- 500+ five-star Google reviews
We are not here to rubber-stamp the police report. Our job is to find out what can actually be proven, challenge the weaknesses that matter, and be ready to try the case if that becomes the right path.
Other cases we take on in Northbrook, IL include:
Talk to a Northbrook, IL Child Pornography Lawyer About Your Case
If police already have your phone or computer, the investigation is not waiting for you to catch up.
A defense team can do more once it understands the scope of the investigation: which devices were seized, what police are claiming, whether anyone gave statements, and which agencies are working the case.
From Northbrook, IL to communities throughout Illinois, Combs Waterkotte defends people facing child pornography and child sexual abuse material allegations in state and federal court.
If you need answers about a CSAM investigation in Northbrook, IL, call (314) 900-HELP or reach out to Combs Waterkotte online for a free, confidential consultation.
