#
Illinois historically regulated crypto only through its general Transmitters of Money Act (TOMA), under which 2017 IDFPR guidance held that digital currency is not 'money' but that fiat-to-crypto exchange/kiosk activity triggers a TOMA money-transmitter license. This changed materially in August 2025 when Illinois enacted two bespoke crypto statutes: the Digital Assets and Consumer Protection Act (SB 1797), giving IDFPR direct licensing/oversight authority over digital asset businesses and exchanges, and the Digital Asset Kiosk Act (SB 2319), a registration regime for crypto ATM/kiosk operators. Implementing rules, licensee lists, and precise operative dates for the new regime have not been independently confirmed in this pass, so the seed's caution against assuming a bespoke licence is now superseded and flagged for verification.
Outlook
The clearest forward marker is DACPA's full-licensing effective date of July 1, 2027, at which point registration-stage obligations convert into a full IDFPR licensing requirement. Whether IDFPR has published final implementing rules for that transition, or whether rulemaking remains in an earlier NPRM or consultation stage, is itself an open question this cycle and one that materially affects how much lead time in-scope firms actually have to prepare. The DACPA/UMTMA interaction question is unlikely to resolve on its own; it will most plausibly be settled either through IDFPR interpretive guidance or through a future legislative amendment clarifying scope, neither of which had occurred as of this cycle.
Crypto Licensing
Illinois' crypto licensing architecture rests on two statutes moving through parallel implementation tracks. The Digital Assets and Consumer Protection Act (205 ILCS 731) requires a person engaging in, or holding itself out as able to engage in, digital asset business activity with or on behalf of an Illinois resident to register with the Illinois Department of Financial and Professional Regulation by 1 July 2027 unless exempt, and to maintain a surety bond or trust account. This duty is enacted but not yet effective, with a legal effective date of 1 July 2027. The Digital Asset Kiosks Act (205 ILCS 732) separately governs kiosk operators: those operating as of 18 August 2025 are not required to register until 1 July 2027, while new operators must register before commencing operation, a provision already in force since 18 August 2025.
Both statutes' implementing rules, 38 Illinois Administrative Code Parts 1031 and 1032, followed the same procedural track: First Notice publication on 15 May 2026, a comment period closing 29 June 2026, and submission of Second Notice rules for a Joint Committee on Administrative Rules hearing scheduled 20 October 2026. The transitional regime layers further duties by date: customer-disclosure, custody and customer-service provisions, and covered-exchange-listing certification phase in to 1 January 2027, while general registration and collection-of-compensation duties transition to 1 July 2027.
One material gap in the record concerns civil penalties for DACPA non-registration: secondary sources disagree, with one reporting exposure up to $100,000 per day and another reporting $25,000 per day capped at $75,000 per day. This is treated as a genuine conflict in the sourced record rather than a simple gap, and it has not been reconciled against the primary statutory text this cycle.
Outlook
The JCAR hearing of 20 October 2026 is the immediate procedural milestone, determining whether the Second Notice rules proceed toward adoption. The registration deadline of 1 July 2027 remains the operative compliance horizon for digital asset businesses serving Illinois residents, with the customer-facing disclosure and custody obligations arriving six months earlier, on 1 January 2027. Resolution of the conflicting penalty figures against primary statutory text would materially sharpen the compliance-risk picture for unregistered activity.
2 earlier distinct update(s)
Crypto Licensing
Illinois's crypto licensing framework rests on two statutes administered by the Illinois Department of Financial and Professional Regulation: the Digital Assets and Consumer Protection Act (205 ILCS 731, DACPA) and the Digital Asset Kiosks Act (205 ILCS 732, DAKA). DACPA requires registration of any covered person engaging in digital asset business activity with an Illinois resident, but this core duty does not commence until 1 July 2027; registrants will then need to designate compliance personnel and maintain written AML/CFT, cybersecurity, and anti-fraud policies approved by their governing body. The statute's civil-penalty structure is already defined, up to 100,000 dollars per day for unregistered activity once the requirement takes effect, and 25,000 to 75,000 dollars per day for other violations, but these penalties cannot bite until the registration duty itself is operative.
DAKA's obligations, by contrast, are already in force, having taken effect 18 August 2025. Crypto kiosk and ATM operators in Illinois must cap daily transactions at 2,500 dollars for new customers and 10,500 dollars for existing customers, cap fees at the greater of 5 dollars or 18 percent of digital assets transacted, provide refunds to fraud victims, report kiosk addresses to IDFPR, and maintain blockchain-analytics and anti-fraud controls. This means Illinois currently regulates crypto kiosks directly while general digital-asset business registration remains prospective.
IDFPR has advanced the implementing rules for both statutes, 38 Ill. Adm. Code 1031 (DACPA) and 1032 (DAKA), to Second Notice, following a First Notice comment period that produced the published text at 50 Ill. Reg. 6746/6771 on 15 May 2026. A Joint Committee on Administrative Rules hearing is scheduled for 20 October 2026 to consider this Second Notice stage. Separately, 38 Ill. Adm. Code 207 was amended effective 2 September 2026 to exempt money-transmission activity conducted solely to purchase, sell, or exchange digital assets by a DACPA registrant from the state's general Uniform Money Transmission Modernization Act licensing regime, avoiding a period of overlapping dual regulation as the DACPA perimeter comes into force.
Illinois sets no state-level test for classifying a token; such questions are left to federal SEC and CFTC jurisdiction, and no Illinois statute or IDFPR rule addresses the question independently.
Outlook
The 20 October 2026 JCAR hearing is the immediate event that will determine whether the Second Notice rules proceed toward adoption. The registration requirement and its penalty structure remain prospective until 1 July 2027, giving covered businesses a defined but narrowing window to build the compliance infrastructure, AML/CFT, cybersecurity, and anti-fraud policies, that registration will require.
Crypto Licensing
Illinois' Digital Assets and Consumer Protection Act (205 ILCS 731) requires digital asset businesses engaging in exchange, transfer, storage, or administration of digital assets with or on behalf of Illinois residents to register with the Illinois Department of Financial and Professional Regulation, regardless of the business's physical location. Full licensing compliance is required by 1 July 2027, meaning the regime is presently in a phased implementation period rather than fully in force. Separately, the Uniform Money Transmission Modernization Act (205 ILCS 658) confirms that digital assets are excluded from the definition of 'money' under that statute, so crypto-only businesses are not separately captured by Illinois' general money-transmitter licensing regime; DACPA is the operative licensing track for digital-asset business specifically, structurally distinct from the fiat money-transmission licensing perimeter.
DACPA's registration requirement applies broadly by reference to activity directed at Illinois residents rather than by reference to where the business itself is located, which gives the statute an extraterritorial reach in practice: an out-of-state or offshore digital-asset exchange serving Illinois customers falls within scope regardless of its own domicile. The statute also carries applicability exclusions for entities that merely contribute connectivity software or computing power, or otherwise participate in network infrastructure without controlling customer assets, and a floor amendment further excluded decentralized exchanges facilitating peer-to-peer exchanges or transfers from DACPA's registration requirement.
Outlook
The 1 July 2027 full-licensing compliance deadline is the operative near-term milestone. Whether IDFPR's finalized implementing rules will include Illinois-specific AML or KYC conditions beyond the federal Bank Secrecy Act baseline remains unresolved this cycle and is the principal open question for the licensing regime's ultimate compliance burden.
1 further periodic run re-emitted the standing brief unchanged and is not shown.
Sources and findings (5)
- T3 · CoinDeskCoinDesk — Digital currency businesses whose activities meet IDFPR's definition of money transmission (e.g., exchanging digital currency for money through a third-party exchanger or automated machine) must secure a TOMA license.retrieved M4bindingin force
- T3 · CoinDeskCoinDesk — IDFPR's 2017 guidance clarified that digital currency is not captured under the definition of 'money' in TOMA, and that mining, crypto-to-crypto exchange, and certain party-to-party exchanges are excluded from money-transmission licensure.retrieved M3bindingin force
- T4 · The BlockThe Block — The Digital Assets and Consumer Protection Act (SB 1797), signed by Governor Pritzker in August 2025, grants IDFPR authority to license and supervise digital asset businesses and exchanges, requiring sufficient financial resources, cybersecurity/anti-fraud measures, and investment disclosures.retrieved M5bindingin force
- T4 · The BlockThe Block — IDFPR has not yet published a publicly confirmed set of finalized digital-asset licensing rules or a public licensee registry under DACPA, indicating the new regime remains in an implementation/transitional phase as of mid-2026.retrieved M3non-bindingour coverage gap, expected to resolve on a re-run
- T4 · The BlockThe Block — The Digital Asset Kiosk Act (SB 2319), signed August 2025, requires crypto kiosk/ATM operators to register with Illinois state regulators, establish live customer service, adopt anti-fraud/compliance policies, and designate a compliance officer and a consumer protection officer.retrieved M4bindingin force