The Illinois numbers
The FBI's Internet Crime Complaint Center publishes state-level data on cryptocurrency kiosk complaints, and the 2025 figures put Illinois sixth in the country on both complaint volume and losses.
Nationally, complaints rose 23% and losses rose 58% over 2024. More than half of complainants were aged fifty or over, accounting for over $302 million of the total.
These are the small numbers
Everything above covers kiosks only. Investment fraud, romance scams, fake exchange platforms and business email compromise routed through crypto are tracked separately and run several times larger. Under-reporting is also severe across every category, because victims are frequently embarrassed and many never file at all.
Kiosk impersonation — the dominant Illinois pattern
This accounts for the figures above and it is the most preventable fraud in the whole category.
The mechanism. Criminals give victims detailed instructions on withdrawing cash from a bank, locating a specific crypto kiosk, and depositing funds — often remaining on the line throughout. The machines are not compromised. They are used exactly as designed by someone who has been manipulated.
The openings, all of which are in current use in Illinois:
- Bank fraud department. Your account is compromised; funds must move to a "secure federal wallet" during the investigation.
- Government agency. The Social Security Administration, Medicare, the IRS, a court clerk, an immigration authority, a sheriff's office. Frequently with a threat of arrest.
- Family emergency. A grandchild or child arrested, hospitalised or detained. Money needed now. Tell no one.
- Utility. Immediate disconnection unless payment is made.
- Tech support. A pop-up or call about a compromised computer, followed by a refund that was "overpaid" and must be returned.
- Employer or supplier. An urgent invoice or payroll issue, usually targeting a small business.
The three rules that stop nearly all of it
No government agency, court, utility, bank or employer ever asks anyone to resolve anything at a crypto kiosk. Anyone guiding you through a machine by phone is committing the fraud, not preventing it. And a wallet QR code you did not generate yourself should never be scanned.
Illinois gives victims a statutory remedy that most states do not — see our refund guide for the 30-day and 60-day windows.
Investment and “mentor” fraud
Larger losses per victim than kiosk fraud, and the fastest-growing category nationally.
The structure. Contact is initiated by the fraudster — Instagram, WhatsApp, Telegram, LinkedIn, a dating app, sometimes a wrong-number text that turns into a conversation. Rapport is built over days or weeks. Eventually a trading platform, a mentor or an "opportunity" is introduced. The platform shows returns. Withdrawal hits a fee, then a tax, then a compliance hold.
Why it works. It is not a scam that depends on greed so much as on relationship. Victims frequently describe months of ordinary conversation before money was ever mentioned, and the person running it is often reading from a script in an industrial-scale operation.
Markers, any one of which is sufficient:
- They contacted you first, in any medium, however innocuously.
- A stated or implied return — a monthly percentage, a "guaranteed" figure, a doubling.
- A platform you had never heard of and cannot find licensed on NMLS Consumer Access.
- Pressure to act before a window closes.
- Any request to install remote-access software.
- Withdrawal blocked pending a payment of any kind.
Campus markets are particularly exposed — see our Champaign-Urbana, DeKalb and Evanston guides.
Romance and long-con fraud
The highest average loss of any category, and the least reported because of the shame attached.
The pattern merges with investment fraud: a relationship formed online, sustained for weeks or months, then an investment opportunity introduced by the person you now trust. Frequently the fraudster claims their own investment is doing well and offers to help you set one up.
Structural markers:
- They will never video call, or the call is brief and low-quality with excuses.
- They work offshore, in the military, in international trade — something that explains distance.
- A crisis arrives that requires money, or an opportunity arrives that requires money.
- They resist meeting in person indefinitely, with plausible reasons each time.
If a friend or relative is in one
Direct confrontation frequently fails — victims defend the relationship, not the money. What works better is asking to see the platform, asking to attempt a small withdrawal together, and asking why the person cannot video call. The evidence does the work. And do not let embarrassment stop a report: the FBI's IC3 data exists precisely because people file.
Fake platforms and the withdrawal wall
Some fraudulent operations run convincing exchange or wallet interfaces — real-time prices, charts, account statements, responsive support. Deposits work perfectly. Balances grow.
The tell is always the same: withdrawal is blocked, and unblocking it requires a payment. A fee, a tax, an anti-money-laundering deposit, a "verification" transfer, an account upgrade. Each one leads to another. There is no money behind the interface and there never was.
How to check before depositing anything:
- Search the legal entity on NMLS Consumer Access. A real US money transmitter shows a licence number, a status and a state list. Illinois requires IDFPR licensing of digital asset businesses by 1 July 2027 with penalties to $100,000 a day.
- Check FinCEN's MSB registrant search. A second independent register.
- Test a withdrawal immediately. Deposit a small amount, withdraw it, confirm it arrives. Do this before anything meaningful.
- Be suspicious of a platform you found through a person. Legitimate exchanges are found through search, not introduction.
Our exchange comparison covers venues that pass these checks.
Recovery-service fraud — the second wave
This one targets people who have already lost money, and it deserves its own section because it works so reliably.
After a loss, you are contacted by a service offering to trace and recover the funds. They use plausible technical language, sometimes a professional website, sometimes a claim of law enforcement affiliation or a "blockchain forensics" credential. An advance fee is required, then another.
The Office of the Illinois Attorney General has issued specific warnings about these services. They are a second fraud, deliberately aimed at people made vulnerable by the first, and in many cases run by the same operation working from the same victim list.
The honest position on recovery
Blockchain transactions are final. Once crypto has left a wallet, no service can reverse it. Recovery, where it happens at all, comes through law enforcement seizing assets at an exchange at the other end — a slow, low-probability process that costs you nothing and that you never initiate by paying a stranger.
Technical attacks
Less common than social engineering, but they account for most losses where the victim did nothing obviously wrong.
Our wallet and custody guide covers all of these properly.
Where to report in Illinois
Do these in order, and do them the day you realise.
- Stop all contact. Block the number and accounts. Do not tell them you have realised, and do not negotiate.
- The kiosk operator, if a machine was involved — within 30 days. In writing. Ask for the consumer protection officer, which every Illinois registrant must designate.
- Your local police department. Obtain a copy of the report itself, not just a case number. The Kiosk Act requires the operator to receive the report within 60 days.
- The FBI's Internet Crime Complaint Center at ic3.gov. This feeds the tracing work that occasionally recovers funds and builds the state-level data quoted on this page.
- The Office of the Illinois Attorney General for a consumer complaint.
- Your bank, if cash was withdrawn from an account, and the exchange or provider if one is involved — occasionally funds can be frozen before they move.
- IDFPR if a kiosk operator is non-compliant — charging above the statutory cap, failing to disclose, or refusing to engage with a refund claim.
This page describes fraud patterns and reporting routes. It is not legal advice. If a significant sum is involved, speak to an Illinois attorney — and within the 30-day kiosk notification window, not after it.
Questions Illinois readers actually ask
How much do Illinois residents lose to crypto scams?
Through cryptocurrency kiosks alone, Illinois recorded 510 complaints and $20,077,277 in adjusted losses in 2025 — sixth highest of any state. The national kiosk total was 13,460 complaints and $388,981,267, up 23% in complaints and 58% in losses over 2024. Investment fraud, romance scams and fake exchange platforms routed through crypto are tracked separately and run considerably larger.
What is the most common crypto scam in Illinois?
Impersonation directing a victim to a crypto kiosk. A caller claims to be from a bank fraud department, a utility, the Social Security Administration, a sheriff’s office, a court or a family member, creates urgency, stays on the line, and walks the victim through depositing cash into a specific machine. More than half of national kiosk complainants in 2025 were aged fifty and over.
Can I get scammed crypto back in Illinois?
Sometimes, and only in narrow circumstances. The Digital Asset Kiosk Act gives new customers a statutory right to recover up to three fraudulent kiosk transactions from their first week or first three uses — notify the operator within 30 days, supply a police report within 60. Outside that, blockchain transactions are final and recovery depends on law enforcement seizing assets at the other end. No service you pay in advance can retrieve them.
Are crypto recovery services legitimate?
No. The Office of the Illinois Attorney General has issued specific warnings about crypto scam recovery services. They contact people who have already been defrauded, demand advance fees to trace or recover funds, and deliver nothing. Legitimate help does not contact you first, does not require an advance fee and does not promise recovery. Law enforcement never charges to investigate.
Where do I report a crypto scam in Illinois?
Four places, in this order. Your local police department, for the report you will need. The kiosk operator, if a machine was involved, within 30 days. The FBI’s Internet Crime Complaint Center at ic3.gov. And the Office of the Illinois Attorney General for a consumer complaint. If an exchange or provider is involved, report to them too — occasionally funds can be frozen before they move.
Keep reading
- Claiming a kiosk refund The statutory process, step by step
- The Digital Asset Kiosk Act Where your rights come from
- Wallets and account security Preventing technical loss
- Verifying a real exchange Licensing you can check
- Arlington Heights Why older suburbs get targeted
- Champaign-Urbana Campus-specific patterns