Financial Integrity Monitor

United States — Illinois US-IL

Domains (D1–D6)

Sources

Role actions

Horizon <90d

Jurisdiction profile

Largely CompliantTier ARisk: IncreasingMixed

Illinois AML/CTF oversight sits atop the federal BSA/OFAC framework: the Illinois Department of Financial and Professional Regulation (IDFPR) licenses currency exchanges and money transmitters under the Transmitters of Money Act and Currency Exchange Act, and shares OFAC-compliance findings with Treasury under a standing MOU.

Chicago hosts a globally significant derivatives complex (CME Group) under CFTC jurisdiction and the nation's highest concentration of crypto ATM kiosks, both federally supervised with limited state-specific AML overlay; no Illinois-specific virtual-currency licensing regime is yet enacted.

Key deficiencies

No enacted Illinois virtual-currency/BitLicense-style licensing regime despite Chicago having the highest state concentration of CVC kiosks nationally
No confirmed IDFPR or Illinois Attorney General enforcement action against crypto ATM operators despite peer states (Iowa, Massachusetts, Connecticut, Nevada, Missouri, Maine) having sued or sanctioned the same operators
Federal OCC national trust charter reinterpretation allows crypto firms to bypass Illinois state supervision entirely, eroding IDFPR's practical AML/consumer-protection reach
CTA domestic beneficial-ownership reporting rollback (March 2025) removes federal BOI visibility into Illinois-formed shell companies

Recent developments (18m)

FinCEN's August 2025 CVC Kiosk Notice singled out Chicago as the DEA-identified primary U.S. collection point for drug-trafficking cash later layered through crypto kiosks
FinCEN renewed Chicago-area residential real estate Geographic Targeting Orders (GTOs) through February 2026 pending transition to the permanent Residential Real Estate Rule
ICIJ's 2026 'Coin Laundry' investigation identified Chicago-based Cumberland DRW as a major continuing bitcoin supplier to scam-exposed ATM networks (Bitcoin Depot, CoinFlip)
DOJ's June 2025 National Health Care Fraud Takedown charged 13 defendants in the Northern District of Illinois amid a $14.6 billion nationwide fraud/laundering sweep
CFTC filed suit against Illinois state officials (April 2026) over the state's cease-and-desist campaign against prediction-market platforms, a federal preemption fight with derivatives-market integrity implications
CTA interim final rule (March 2025) exempted all domestic reporting companies, including Illinois-formed entities, from federal beneficial ownership reporting

United States federal law that applies in United States – Illinois is covered once, on the United States page. This page covers United States – Illinois’s own layer: its own law, regulators and enforcement.

Brief

Lead signal

Lead Signal

Read full brief

Lead Signal

Illinois has extended an existing federal obliged-entity architecture into a newly legalized gaming vertical. The Sports Wagering Act amendment creating Illinois Gaming Board licensure for fantasy-contest operators, at Section 25-120.5(a), requires licensees to comply with anti-money-laundering standards as defined by the federal Bank Secrecy Act of 1970 and the Anti-Money Laundering Act of 2020. This is not a new state AML statute or a new Financial Intelligence Unit; Illinois has no independent state AML law. It is a state-level licensing condition that pulls a newly regulated activity class into the existing federal BSA/FinCEN compliance perimeter, which is the pattern to watch as more US states create adjacent licensing regimes for previously ambiguous product categories.

Other Developments

Digital-asset registration architecture without an AML-specific clause. Illinois enacted the Digital Assets and Consumer Protection Act (205 ILCS 731), effective 18 August 2025, giving the Illinois Department of Financial and Professional Regulation authority to register, supervise, and take enforcement action, including civil penalties of up to $100,000 per day, against digital-asset exchanges and administrators serving Illinois residents. This is framed by IDFPR as consumer protection, and no AML-specific provision within DACPA itself was independently confirmed this cycle. The architecture is nonetheless compliance-technology-adjacent: a registration and supervisory perimeter of this kind is the kind of infrastructure a future AML overlay could be built on top of, even though no such overlay has been issued yet.

Cross-Monitor Connections

The fantasy-contest AML duty under Section 25-120.5(a) is the same statutory provision that the world-payments and advennt monitors will surface from their own vantage points; here the relevant reading is the extension of the federal BSA/AMLA-2020 obliged-entity model into a new gaming licensing class, rather than the gambling-market or payments-infrastructure framing those monitors will apply. The DACPA/IDFPR registration architecture also intersects with the crypto monitor's licensing coverage of the same instrument; the financial-integrity reading is narrower, treating the registration perimeter strictly as compliance-technology-adjacent infrastructure rather than as a licensing achievement in its own right.

Outlook

Watch whether IDFPR's forthcoming DACPA implementing rules, expected around the first quarter of 2027 on a half-year uncertainty band, add any Illinois-specific AML or KYC conditions beyond the federal BSA baseline; none has been confirmed as of this cycle. Watch also whether Illinois extends the Section 25-120.5(a) AML-duty model to other newly licensed gaming or gaming-adjacent verticals, which would confirm this cycle's pattern as a template rather than an isolated instance.

weekly_brief_draft · JID US-IL

Domain intelligence (D1–D6)

D1 Sanctions

Not covered

Sanctions is not yet covered for this jurisdiction in this report.

D2 Beneficial Ownership

Not covered

Beneficial Ownership is not yet covered for this jurisdiction in this report.

D3 Enabler Jurisdictions

Not covered

Enabler Jurisdictions is not yet covered for this jurisdiction in this report.

D4 Conflict Finance

Not covered

Conflict Finance is not yet covered for this jurisdiction in this report.

D5 Crypto, Digital Assets, and Financial Innovation

Crypto, Digital Assets, and Financial Innovation

Illinois enacted the Digital Assets and Consumer Protection Act (205 ILCS 731), effective 18 August 2025, which gives the Illinois Department of Financial and Professional Regulation authority to register, supervise, and take enforcement action against digital-asset exchanges and administrators serving Illinois residents, with civil penalties of up to $100,000 per day for violations. The instrument is framed by IDFPR as a consumer-protection measure, and no AML-specific provision within DACPA itself was independently confirmed this cycle. That absence is itself worth naming precisely: the state has built a substantial registration and supervisory perimeter around digital-asset business activity without, so far as this cycle's research established, attaching an explicit anti-money-laundering clause to that perimeter. This is the enablement-as-signal pattern this monitor's register is built to surface: a state creating meaningful regulatory infrastructure for a sector without yet layering financial-crime controls onto it is analytically significant in its own right, independent of any enforcement action.

The architecture-over-incident reading here is that DACPA's registration requirement, its civil-penalty regime, and IDFPR's supervisory authority together constitute compliance-technology-adjacent infrastructure. A registry of who is transacting digital-asset business with Illinois residents, backed by enforcement powers, is the kind of structural precondition that an AML overlay could be built on top of later, whether via IDFPR rulemaking or a subsequent legislative amendment. It is not, on the evidence gathered this cycle, itself an AML instrument.

Outlook

The question to track is whether IDFPR's forthcoming DACPA implementing rules, expected around the first quarter of 2027 within a half-year uncertainty band, add any Illinois-specific AML or KYC conditions beyond the federal Bank Secrecy Act baseline. As of this cycle, no such condition has been confirmed, and the July 2027 full-licensing compliance deadline for digital-asset businesses serving Illinois residents remains the operative near-term milestone. Whether Illinois follows the fantasy-contest precedent, discussed elsewhere in this brief, of attaching an explicit federal-standards AML clause to a state licensing instrument is the pattern to watch for DACPA specifically.

D6 Compliance Technology and Active Defence

Compliance Technology and Active Defence

This cycle's signal for compliance technology in Illinois is indirect and infrastructural rather than a discrete tooling development. The Illinois Department of Financial and Professional Regulation's registration and supervisory architecture under the Digital Assets and Consumer Protection Act, established by P.A. 104-0428 effective 18 August 2025, creates a registry of digital-asset businesses serving Illinois residents backed by enforcement powers of up to $100,000 per day in civil penalties. No AML-specific guidance has been issued under this architecture as of this cycle, but the registration requirement itself is the kind of structural precondition that compliance-technology tooling, transaction monitoring, screening, and reporting systems, would eventually need to plug into once, and if, an AML overlay is added.

This is worth flagging in the compliance-technology domain specifically because the three-pillar balance principle this monitor applies means AML enforcement volume should not crowd out attention to the compliance infrastructure being built ahead of enforcement activity. A registration perimeter without an AML overlay is not evidence of an active-defence gap on its own; it is evidence that the state has sequenced registration ahead of financial-crime-specific rulemaking, which is a common and often deliberate regulatory sequencing choice.

Outlook

Watch for whether IDFPR's implementing rules, expected around the first quarter of 2027, include any requirement for registered digital-asset businesses to deploy specific transaction-monitoring or screening technology as a condition of registration. No such requirement has been confirmed this cycle. Absent that, the compliance-technology signal for Illinois remains a watch-only item rather than an active development.

D7 AML/CTF Regime

AML/CTF Regime

Illinois has no independent state anti-money-laundering statute and no state Financial Intelligence Unit; AML supervision in the state remains a function of the federal Bank Secrecy Act and FinCEN architecture. This cycle's material development is not a change to that federal-state division of authority, but a state-level licensing condition that extends the existing federal obliged-entity model into a newly regulated gaming vertical. The Sports Wagering Act amendment creating Illinois Gaming Board licensure for fantasy-contest operators, at Section 25-120.5(a), requires those licensees to comply with anti-money-laundering standards as defined by the federal Bank Secrecy Act of 1970 and the Anti-Money Laundering Act of 2020.

The architecture-over-incident reading is that this is a structural finding, not an incident: Illinois has not created new AML law, it has conditioned a new category of state gaming licensure on compliance with the existing federal standard. This is a template worth watching for reuse: other states building adjacent licensing regimes for previously ambiguous or newly legalized activity classes, prediction markets, digital-asset kiosks, fantasy-contest variants, may follow the same pattern of layering a federal-standards AML compliance clause onto a new state licence rather than legislating independent AML requirements. Separately, IDFPR's DACPA/DAKA registration architecture for digital-asset businesses is compliance-technology-adjacent infrastructure that a future AML overlay could build on, but no AML-specific clause within DACPA itself has been confirmed this cycle; that is treated in this brief's D5 and D6 sub-briefs rather than here.

Outlook

Watch whether Illinois or other US states extend the Section 25-120.5(a) style federal-standards AML compliance clause to further newly licensed gaming or gaming-adjacent verticals over the coming cycles, and whether IDFPR's forthcoming DACPA implementing rules add any Illinois-specific AML or KYC condition beyond the federal BSA baseline. Neither has been confirmed as of this cycle.

D8 Commercial Activity

Not covered

Commercial Activity is not yet covered for this jurisdiction in this report.

Regulatory horizon

Consultation2027-Q1 · ±half_year

IDFPR DACPA/DAKA implementing rules

Digital-asset businesses serving Illinois residents will need to register with IDFPR ahead of the July 2027 full-licensing deadline; customer-disclosure/custody provisions phase in from January 2027.

Source

1 dated · 3 pending date · baseline financial-integrity-2026-07-05

Role action cards

MLRO

A new Illinois state gaming licence now carries an explicit federal BSA/AMLA-2020 compliance condition.

Fantasy-contest operators newly licensed under the Sports Wagering Act must comply with anti-money-laundering standards as a condition of that licence. Where your institution operates or partners with Illinois-licensed fantasy-contest platforms, confirm that BSA/AMLA-2020 obliged-entity treatment is understood to apply to this newly regulated activity class.

1 evidence refs

Compliance

Illinois built a digital-asset registration and enforcement perimeter (DACPA) without a confirmed AML-specific clause.

IDFPR can register, supervise, and penalize digital-asset exchanges and administrators serving Illinois residents up to $100,000 per day, but no AML-specific provision within DACPA itself was confirmed this cycle. Compliance functions supporting digital-asset business in Illinois should track IDFPR's forthcoming implementing rules for any AML/KYC addition.

2 evidence refs

Legal

No material change this cycle.

No material change for this persona this cycle

Board

Illinois is extending federal AML obliged-entity architecture into new state-licensed gaming and digital-asset verticals.

This is a structural pattern, not an isolated event, and signals how state-level licensing regimes in the US may increasingly piggyback on the federal BSA baseline rather than legislate independent state AML law. Board-level financial-crime risk exposure from Illinois-licensed gaming or digital-asset subsidiaries should be assessed against this evolving pattern.

1 evidence refs

CTO

IDFPR's digital-asset registration architecture is compliance-technology-adjacent infrastructure with no confirmed AML overlay yet.

Technology teams supporting digital-asset compliance in Illinois should note that DACPA/DAKA registration infrastructure exists but no AML-specific technical standard or reporting integration has been confirmed this cycle; build flexibility into any registration-integration work pending IDFPR's implementing rules.

1 evidence refs

Risk

A new obliged-entity class (fantasy-contest licensees) has been created in Illinois with a federal-standards AML condition.

Risk functions should incorporate Illinois fantasy-contest licensees into obliged-entity risk-scoring models where relevant, given the newly imposed Section 25-120.5(a) compliance duty referencing BSA 1970 and AMLA 2020 standards.

1 evidence refs

Operations

No material change this cycle.

No material change for this persona this cycle

Audit

A new state licensing condition references federal AML standards without a confirmed independent audit or reporting mechanism at the state level.

Internal audit scope for Illinois-licensed fantasy-contest operations should confirm how compliance with the Section 25-120.5(a) AML condition is documented and evidenced, given that this is a state licensing condition referencing federal standards rather than a distinct state-level audit regime.

1 evidence refs

Decision lens

MLRO

A new Illinois state gaming licence now carries an explicit federal BSA/AMLA-2020 compliance condition.

Compliance

Illinois built a digital-asset registration and enforcement perimeter (DACPA) without a confirmed AML-specific clause.

Legal

No material change this cycle.

Board

Illinois is extending federal AML obliged-entity architecture into new state-licensed gaming and digital-asset verticals.

CTO

IDFPR's digital-asset registration architecture is compliance-technology-adjacent infrastructure with no confirmed AML overlay yet.

Risk

A new obliged-entity class (fantasy-contest licensees) has been created in Illinois with a federal-standards AML condition.

Operations

No material change this cycle.

Audit

A new state licensing condition references federal AML standards without a confirmed independent audit or reporting mechanism at the state level.

Shared evidence: 2 refs

Scenario sketches

AMLA supervisory transition and cross-border obliged-entity evasion pathways

Illustrative orientation only: as the EU's Anti-Money Laundering Authority moves from purely national AML supervision toward direct and indirect supervision of cross-border obliged entities under the AMLA Regulation (Reg (EU) 2024/1620), alongside the directly-applicable AMLR (Reg (EU) 2024/1624) and per-Member-State transposition of the sixth AML Directive, one illustrative structural question is whether entities operating across multiple supervisory perimeters could exploit transition-period gaps between national and AMLA-level oversight. This is not observed in Illinois or any US jurisdiction this cycle; it is offered as architecture-over-incident orientation for how a hybrid supervisory regime could reshape evasion incentives generally, independent of any specific US-IL finding.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Standing trackers (T1–T6)

Tracker	Status	Note
T1 · Russian Sanctions-Evasion Architecture	no_change	Out of scope for this US-IL-bound dispatch.
T2 · EU AML Package / AMLA	no_change	Not applicable to US-IL (non-EEA jurisdiction).
T3 · FATF Grey List	no_change	Not applicable at the US-IL subnational level.
T4 · Beneficial-Ownership Register Status	no_change	No US-IL-specific development located; out of scope for this pass.
T5 · Crypto & Digital-Asset Integrity	watch	Illinois enacted DACPA (205 ILCS 731) and the Digital Asset Kiosk Act (205 ILCS 732), giving IDFPR registration/enforcement authority over digital-asset businesses and kiosks, plus a new Digital Asset Tax Act (0.2% privilege tax, effective 2027-01-01). No AML-specific provision independently confirmed this cycle.
T6 · Sanctions Regime Divergence	no_change	Not applicable at the US-IL subnational level.

Registers

Enforcement actions

As part of a nationwide National Health Care Fraud Takedown, DOJ charged 324 individuals across the country in connection with over $14.6 billion in alleged health care fraud, with 13 defendants charged in the Northern District of Illinois, involving laundering of fraudulently obtained Medicare/Medicaid reimbursements. 30 Jun 2025
FinCEN issued Notice FIN-2025-NTC1 urging heightened vigilance on convertible virtual currency (CVC) kiosk suspicious activity, explicitly citing Chicago as the DEA-identified primary drug-proceeds collection point and noting approximately 1,167 CVC kiosks operating in Chicago alone. 4 Aug 2025
FinCEN renewed its Geographic Targeting Orders requiring title insurers in covered Chicago-area counties to identify beneficial owners behind shell-company cash purchases of residential real estate above the $300,000 threshold, extended through February 28, 2026 pending transition to the permanent Residential Real Estate Rule. 9 Oct 2025
The CFTC sued Illinois (and Connecticut) state officials seeking injunctions after Illinois issued cease-and-desist letters to prediction-market platforms including Kalshi and Crypto.com, asserting exclusive federal jurisdiction over event-contract derivatives against the state's gambling-law enforcement approach. 2 Apr 2026

Sanctions changes

FinCEN designated Huione Group under Section 311 of the USA PATRIOT Act as a financial institution of primary money laundering concern, severing its access to the U.S. financial system; the action is directly relevant to Illinois given Chicago's dense CVC kiosk/exchange exposure to cross-border stablecoin flows of the type Huione facilitated. 14 Oct 2025
Following National Security Presidential Memorandum-2 (Feb. 4, 2025), OFAC intensified 'maximum pressure' sanctions enforcement on Iran, reinforcing the extensive U.S. prohibition on correspondent account relationships with Iranian financial institutions applicable to all U.S.-domiciled banks, including those chartered or operating in Illinois. 4 Feb 2025

Regulatory horizon (register)

FinCEN AML/CFT Program Rule modernization finalization
Illinois Digital Assets and Consumer Protection Act enactment
Residential Real Estate Rule reporting requirement effective date

Active schemes

[HIGH] Chicago CVC kiosk drug-proceeds and scam laundering pipeline
Chicago trading-firm bitcoin supply to scam-exposed ATM networks
Chicago-metro shell-company residential real estate layering

Sources

Coverage gaps

Despite Chicago having the highest concentration of CVC kios…

Despite Chicago having the highest concentration of CVC kiosks in Illinois (1,167 of 1,626 statewide) and DEA/FinCEN explicitly flagging the city as a primary drug-money laundering collection point, no Illinois Attorney General or IDFPR enforcement action against crypto ATM operators has been identified in the 18-month window, in contrast to Iowa, Massachusetts, Connecticut, Nevada, Maine, and Missouri, which have sued or settled with the same operators (Bitcoin Depot, CoinFlip).

A reinterpretation of federal banking rules by the Office of…

A reinterpretation of federal banking rules by the Office of the Comptroller of the Currency allows crypto firms to obtain slimmed-down national trust charters that grant immunity from state regulator actions, directly undermining IDFPR's practical authority to police AML/consumer-protection conduct by crypto firms operating in or from Illinois.

FinCEN's March 2025 interim final rule exempted all domestic…

FinCEN's March 2025 interim final rule exempted all domestic reporting companies, including Illinois-formed corporations and LLCs, from Corporate Transparency Act beneficial ownership reporting, removing the principal federal transparency tool for screening Illinois-registered shell companies used in real estate and trade-based layering schemes.

Evidence

Confidence-tiered claims

No structured claims published for this jurisdiction yet.