03 / Illinois rules and personal control
Know who to contact before something goes wrong.
Illinois enacted the Digital Assets and Consumer Protection Act and the Digital Asset Kiosks Act on August 18, 2025. IDFPR’s overview explains kiosk transaction and fee limits, disclosures and scam refund protections, along with implementation information.
These are legal requirements with scope and conditions. They are not a guarantee that every loss will be refunded, that every provider is approved or that Bitcoin cannot lose value. Use the regulator’s current guidance and the applicable law for a specific problem. Do not assume a cashier cash load and a kiosk purchase receive identical treatment.
IDFPR’s consumer resources link to complaint information and current alerts. Keep the operator name, receipt, transaction identifier, dates and messages. Contact the provider and relevant authorities promptly if you suspect fraud; deadlines may matter.
Stop if someone else is directing the purchase.
The FTC describes scams in which a caller impersonates a bank, government office or business and tells a person to move money into cryptocurrency for protection. End that conversation and contact the organization through a number you independently verify. Do not use a wallet address or QR code supplied by the caller.
Never share your recovery phrase or give a stranger remote access to your account. A legitimate looking location does not make the person on the phone legitimate. Cryptocurrency transfers usually cannot simply be reversed, and a paid recovery offer can be another scam.
Buying on your own initiative still involves financial risk. Choose an amount you can afford to lose and understand where the Bitcoin will be held. No neighborhood, payment method or familiar retailer changes that.