A UK casino not on GamStop is an offshore site with no Gambling Commission licence, so the scheme's register never reaches it. That means no licence, no UK consumer protections and no route to a British regulator if something goes wrong — and the Commission treats the sites themselves as illegal operators it is actively disrupting.
There is a particular kind of confidence that attaches to the phrase "not on GamStop". It arrives in the same tone as "off the grid" or "no questions asked" — as though the absence of a register entry were a feature rather than a gap. I have spent years reading the paperwork behind both sides of this market, and I can tell you the gap is real and it is load-bearing. A casino not on GamStop works precisely because nothing about British consumer protection follows it offshore. No licence condition, no fair-terms rule, no requirement to close an account and return the balance the moment a self-exclusion is registered. In July 2026 GamStop Online reported 614,738 consumers currently on the register, more than one in two of them on the maximum five-year term. Those are people the scheme holds. What the scheme cannot do is reach an operator that never joined it — and offshore sites that hold no UK Gambling Commission licence are not connected to GamStop and are not covered by it, since the obligations apply only to UKGC-licensed operators. The regulator's answer to this has shifted in the last two years from letters to engineers: refer the domain, block the registrar, cut the host, and increasingly follow the money. So this page is about what the Commission actually does, what the numbers say about whether it works, and how anyone judging one of these sites should read the licence, the terms and the documents.
Table of Contents8
- ## A Licence That Says Almost Nothing
- ## What the Regulator Does About Unlicensed Sites
- ## How Much of the Market This Actually Is
- ## The Checks You Will Meet, and When
- ## Five Signs a Site Can Be Trusted
- ## How to Judge One of These Sites
- ## Questions About Gambling Outside GamStop
- ## Offshore Gambling and GamStop
## A Licence That Says Almost Nothing
The first thing to understand about a casino not on GamStop UK players encounter is that "licensed" is doing enormous work in that sentence and carrying almost no weight. The regulator's own published position is blunt: it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence, and that includes an operator holding a licence somewhere else entirely. The Commission can only regulate websites that trade or advertise to British customers, and those must hold its licence. So when an offshore site displays a seal, the question is not whether some authority somewhere took a fee. It is whether that authority has any purchase on the relationship between the site and the person playing on it.
A UK casino not on GamStop typically holds one of a small number of offshore licences, and those licences differ not in strictness but in what they even attempt to do. Curaçao rebuilt its regime under the National Ordinance on Games of Chance, in force from 24 December 2024, replacing the old master-licence and sub-licence model with direct supervision by the Curaçao Gaming Authority. The legacy "orange" sub-licence certificates of operation ended on 15 October 2025, and a historic /JAZ number must not be treated as proof of a current licence — which is a useful thing to know, because those numbers still sit at the foot of plenty of sites. Anjouan issues Internet Gaming Licences under legislation adopted in 2005, at a published EUR 17,828 for B2C issuance and the same again annually. An ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims more than 1,300 gambling licences issued at around EUR 17,000 each per year, and that a former attorney-general of the Comoros called the entity selling them "an illegal entity". Anjouan Gaming itself said in a statement on 10 June 2026 that a licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world". That is the regulator telling you, plainly, that its own piece of paper does not authorise the site to take a British customer. Kahnawà:ke has regulated interactive gaming since its Regulations concerning Interactive Gaming came into force on 8 July 1999, and its licence structures are real. Malta has the most substantial regime of the group.
What none of them have is a British licence condition. That is the whole of it. A UK-licensed operator must verify who a customer is before they gamble, must cap bonus wagering at ten times from 19 January 2026, must tell a player their deposit balance can be withdrawn at any time even with a bonus pending, and must close an account and return the funds when a self-exclusion is registered. Offshore, each of those is a choice the site makes and can unmake in a terms update. The reputable ones often make similar choices. The point is not that they are lying. The point is that nothing enforces it.
## What the Regulator Does About Unlicensed Sites
This is the part of the story that gets least airtime and matters most, because the Commission's disruption work is the only real answer British customers have to the fact that a foreign operator is beyond the reach of a British court in practice. The activity is measurable, and the measurement is not flattering to the idea that these sites are untouchable.
Since April 2024 the Commission's Illegal Markets team has issued 3,140 cease and desist and disruption notices — 2,032 cease and desist notices, 774 registrar referrals, 402 host referrals and three payment provider referrals. Over the same period it referred 447,778 Bing and Google URLs and secured 287,961 removals. The intensity has climbed sharply: 1,835 websites were referred to search engines in July to September 2026 alone, alongside 546 cease and desist notices to illegal operators, against 226 website referrals and 98 notices in January to March 2026.
The Commission's own analysis of what works is the interesting bit, and it is not what the search-engine headlines suggest. Measuring across 160 illegal gambling websites, it found an average 32 per cent decrease in engagement after disruption. By method, registrar blocks and website suspensions each produced an average fall of 91 per cent, GEO IP blocking 60 per cent, Bing removal 52 per cent, Google removal 30 per cent and Facebook removal 8 per cent. Search removal makes a site harder to find. It does not stop anyone who already knows the address, and the Commission says as much. Its estimate of time spent by British consumers on illegal gambling websites fell from 306 million minutes in January 2025 to 116 million in June 2025, then rose again to 152 million in July 2025 — which tells you the disruption is real and the market regrows behind it.
Enforcement against people, as opposed to domains, is essentially absent. Across April 2025 to March 2026 every quarter recorded zero or one prosecutions commenced, a total of one. There were zero criminal investigations begun in April to June 2026. The Illegal Gambling Taskforce's terms of reference, published by DCMS on 13 May 2026, set three priorities: reducing payments to and from illegal operators, tackling online advertising of illegal gambling, and improving cross-agency enforcement. Payment data reported to the Visa Operator Scheme is described by the Commission as critical and still early-stage. Read the whole picture and the strategy is clear enough: strangle the plumbing, because you cannot arrest a server.
## How Much of the Market This Actually Is
Every estimate here comes with an agenda attached, and the honest thing is to lay them side by side rather than pick one.
The Commission's own survey analysis, published 5 November 2026 and covering April 2025 to April 2026, puts engagement with illegal gambling websites at 0.6 per cent of all respondents in the past four weeks and a further 0.4 per cent in the past 12 months, with 94.4 per cent showing no indication at all. Among people who had gambled online in the past four weeks, 2.5 per cent had engaged with an illegal site and another 1.5 per cent in the past year. Its dashboard recorded 586 illegal gambling websites accessible to British consumers in September 2026. H2 Gambling Capital, a market-intelligence firm, estimated £16.6 billion staked with illegal operators in the UK in 2025, up from around £5 billion in 2019, with the legal share of gambling falling from 97 per cent to 92 per cent. A Frontier Economics study for the Betting and Gaming Council put online black-market stakes at a conservative £2.7 billion a year. Yield Sec's analysis for the Campaign for Fairer Gambling put the British online market at £8.8 billion gross gaming revenue in 2025, 91 per cent regulated.
The spread between £0.8 billion and £16.6 billion is not a rounding error; it is methodology, and the parties commissioning each figure want it pointed in a different direction. What is not in dispute is that the Commission's measurement explicitly does not capture activity hidden by VPNs, so every estimate built on web traffic is a floor. Nor is it in dispute that the sites are not hard to reach. Over the monitored period of May 2024 to July 2025, just over 1,000 unique illegal gambling websites were accessed by consumers in Great Britain.
For anyone weighing a site's terms against a UK-licensed operator's, the practical comparison is not headline promises but the mechanics. This is where the differences concentrate:
| Criterion | UK-licensed operator | Offshore operator outside GamStop |
|---|---|---|
| Bonus wagering cap | Maximum 10× since 19 January 2026 | Commonly 25×–50×; no cap applies |
| Maximum cashout on bonus winnings | Prohibited to cap the deposit balance | Often 300% of bonus credit, excess voided |
| Maximum bet while wagering | Not a licence term | Often €5–€10, with winnings forfeited above it |
| Reverse withdrawal | Banned since 31 October 2021 | Site's own choice |
| Withdrawal limits set by the house | Unfair term under the Consumer Rights Act 2015 | A clause in the terms |
| Self-exclusion | Account closed, balance returned | Not applicable; the register does not reach it |
| Dispute route | Free ADR, decisions published | The operator's own nominated ADR, if any |
The row that matters most is the third from the bottom. A maximum limit on what a customer may withdraw from their deposit balance is a term the Commission names as prohibited, and its own example of the species — "You may withdraw up to £50 per day and up to £500 per week" — sits cheerfully in offshore terms in various formulations. In October 2026 the Commission announced that one licensee would pay £900,000 in a regulatory settlement for failures including unnecessarily delaying consumer withdrawals. A term restricting customers to one withdrawal request at a time was found unfair under the Consumer Rights Act 2015. That is what enforcement looks like when a regulator has jurisdiction. Offshore, the same term is simply a term.
## The Checks You Will Meet, and When
If there is one thing this topic turns on, it is identity verification, and the reason is arithmetic. In the UK, customer due diligence duties come from the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017, and for remote casinos identification and verification are required when a customer deposits or withdraws €2,000 or more, whether in a single transaction or in transactions that appear to be linked. Licence Condition 17 goes further, requiring identity to be established before a customer is permitted to gamble. A British operator may run a hybrid approach — identify at registration, defer full verification to the threshold — but it cannot spring the paperwork at the point of a withdrawal. Condition 17.1.1 says a withdrawal request must not create a requirement for additional information if the licensee could reasonably have requested it earlier. The only exception is information it must obtain at that moment under another legal obligation, such as an anti-money-laundering rule.
Offshore, that sequencing protection does not exist. Which is why the single most reliable warning sign on one of these sites is a verification requirement that materialises only when the balance is large and the withdrawal button has been pressed. The Commission's own figures show how common that pattern is even inside the regulated market: its 2026 blog reported that over a quarter of complaints reaching its Contact Centre concern identity verification, raised when documents are demanded only at withdrawal, and a 2024 blog put withdrawal problems as the number one topic raised by consumers, at around 2,000 complaints a year. The Competition and Markets Authority's view, from its 2016–2019 investigation, is that consumers are legally entitled to their deposited money and to winnings from money deposited and gambled, and operators cannot confiscate funds because identity documents have not been supplied.
The first time is usually painless anywhere — a name, an address, a date of birth, often matched electronically against credit reference and electoral roll data with no documents at all. Later is where it turns. Checkable expectations on a well-run site: the document list is published before the first deposit, not disclosed afterwards; verification happens at or before the threshold rather than at cashout; there is a named alternative dispute resolution provider in the terms; and there is a stated resolution window. Anjouan Gaming requires licensees to designate an Authority-approved ADR provider and to name it in player-facing terms, with complaints resolved within 30 days before escalation. Those providers currently approved are EGIS ADR, Axion ADR, iGaming ADR and an approved ADR service. If a site's terms name none of this, that is not an omission. It is the answer.
## Five Signs a Site Can Be Trusted
None of these proves a site is safe. Each one is a question with a verifiable answer, which is more than most of the marketing copy these sites publish can claim.
The licence is current, and the seal resolves
Check the licence by clicking the seal and watching where it goes, not by reading the badge image. A Curaçao Certificate of Operation Seal must redirect to cert.cga.cw, and if the certificate behind it shows a different domain from the one being visited, the site is displaying an operator's certificate that is not its own and should be treated as unauthorised. Kahnawà:ke's Logo Certificate Program, effective 15 January 2010, generates a Certificate of Good Standing confirming whether a site holds a valid permit. Anjouan's certificate framework carries a unique licence number and a QR code linking to a public register. If nothing resolves, the badge was decoration.
The terms name a dispute route with a real address
A reputable operator states who adjudicates a dispute and how to reach them. Anjouan requires a named, approved ADR provider. Malta asks players to complain by form and reviews submissions in English or Maltese. Kahnawà:ke employs a full-time Dispute Resolution Officer. If the terms route every complaint back to the operator's own support queue and stop there, there is no second opinion available anywhere in the world.
Withdrawal rules are published before the first deposit
Look for the maximum cashout clause, the maximum bet while wagering, and any per-withdrawal cap — before depositing, not after winning. One offshore operator caps maximum bets while wagering at €5 for regular players and €10 for VIPs and rejects anything above it; another reserves the right to limit withdrawable bonus winnings to 300 per cent of the credited bonus, voiding the excess. A site that publishes these on the same page as the offer is being straight with you. A site that buries them three clicks deep is telling you where its incentives lie.
The customer-funds disclosure is specific, not vague
Operators who hold customer funds must state whether those funds are protected if the business fails, and there is a three-tier rating system for it. Malta requires minimum issued and paid-up share capital of EUR 100,000 for its Type 1 and Type 2 B2C licences, which is a factual claim about substance. If the terms say nothing about segregation, insolvency or where the money actually sits, assume nothing protects it.
Complaints about the site exist in the open
Search the operator's name alongside the word "withdrawal" and read the pattern rather than the individual grievance. A cluster of complaints about the same specific mechanism — one withdrawal at a time, documents demanded at cashout, accounts locked after a large win — is a description of the terms doing exactly what they were written to do. A handful of unrelated grumbles is just the internet. Absence of complaints is not evidence of quality; a site that has been running for eleven months has not had time to accumulate them.
## How to Judge One of These Sites
Six steps, in order. The first three cost nothing and should happen before a penny moves.
- Read the licence, then verify the licence. Find the regulator named at the foot of the site and check the domain against that regulator's own register or seal-resolution service. The reason is that the regulator's name on a page costs nothing to type, and legacy /JAZ numbers and expired orange certificates are still displayed widely.
- Read the bonus terms on the withdrawal page, not the offer page. Locate the maximum cashout, the maximum bet while wagering, the game-weighting chart and any per-withdrawal cap. The reason is that these four clauses decide what a win is actually worth, and none of them appears in the headline offer.
- Check whether self-exclusion is on the table at all. If a person is on the GamStop register, no offshore site is a way round it — a GamStop exclusion holds for its full term and then stays in place until the person contacts GamStop to remove it. There is no route out of it and no site that legitimately offers one. The reason to check is that sites which advertise to that register are describing a product, not a protection; the Commission issued an industry warning notice on 20 January 2025 about unlicensed sites targeting customers who have self-excluded.
- Test the support channel before depositing. Ask a specific question about the withdrawal process in writing and see what comes back and how fast. The reason is that this is the same channel that will handle a dispute, and a slow, vague answer before money is at stake predicts a slower one afterwards.
- Set any account limits at the point of the first deposit. UK-licensed operators must prompt for a financial limit before a first deposit, and must offer limits using a free-text box at account level. Offshore sites may offer the same tools, but only the site enforces them, so set them deliberately rather than assuming a prompt will appear.
- Decide the amount before the account exists, and keep it at a level that would be survivable to lose. The reason is arithmetic, not morality: with no British consumer law behind the account and no free ADR route guaranteed to be available, the realistic downside is the full balance. Money that cannot afford that outcome should not sit in an offshore account.
And if any of this stops being academic — for anyone, in any household — the National Gambling Helpline is operated by GamCare and is free on 0808 8020 133, 24 hours a day, every day of the year, with the same number reaching live chat and WhatsApp. In Wales the number given is 0808 2819 265. It is not a crisis line, and staff cannot transfer someone at immediate risk, but it is the front door to the treatment system that the statutory levy funds — just under £120 million in its first year, ringfenced for research, prevention and treatment.
## Questions About Gambling Outside GamStop
Are UK casinos not on GamStop legal?
An offshore site taking British customers without a Commission licence is not legal, and the Commission says so directly: it is illegal to offer commercial gambling services to consumers in Great Britain without its licence, including where an operator holds a licence in another jurisdiction. Anjouan Gaming has acknowledged that no licence exempts an operator from local law. The customer commits no offence by adult play.
Why do these sites stay outside GamStop?
GamStop's obligations attach to the licence. Social responsibility code 3.5.5 requires licensees of the Gambling Commission to participate in the national multi-operator self-exclusion scheme, and that requirement has applied since 31 March 2020. An operator with no Commission licence is outside the condition entirely, so the register never reaches it and the scheme has no mechanism to add it.
Do offshore sites pay out faster than UK ones?
Not on the evidence. UK data covering June to September 2024 recorded 44.2 million withdrawals at large online operators, of which 96.3 per cent cleared automatically and 3.5 per cent within 24 hours. That is the standard to beat. Offshore sites are not faster in principle — they are simply free to add whatever friction their terms permit, including per-withdrawal caps that no British licence would allow.
What happens if an offshore casino refuses to pay out?
There is no free British ADR route and the Commission cannot help recover money — it is a regulator, not an ombudsman, and it cannot resolve individual complaints. The site's own nominated provider is the only forum, and only if the terms actually name one. Anjouan, for instance, requires an approved provider, currently EGIS ADR, Axion ADR, iGaming ADR or an approved ADR service.
Are the licences these sites display real?
Some are. Curaçao now licenses directly through the Curaçao Gaming Authority, and Malta and Kahnawà:ke run substantive regimes. But validity is not the same as relevance, and certificates are frequently stale or borrowed. A Curaçao seal must resolve to cert.cga.cw, and a certificate showing another site's domain means the visitor is looking at someone else's paperwork. Verify, do not admire.
Does a no-deposit bonus make an offshore site worth trying?
It changes the risk, not the terms. Offshore no-deposit offers typically carry wagering in the 40× to 60× range against €50–€100 cashout caps, and one operator warns that redeeming two no-deposit bonuses consecutively can void subsequent winnings. A UK operator's bonus is capped at 10× wagering by licence condition. The free money is real; the conditions attached to it are the product.
Can someone on the GamStop register play at one of these sites?
They can open an account, but nothing about it is a route round the register, and the register does not lapse. A GamStop exclusion holds for its full term and then remains in place until the person contacts GamStop to remove it, and it cannot be cancelled during the period. The Commission's January 2025 warning notice flagged unlicensed sites that target self-excluded customers precisely because that is a marketing strategy, not a service.
## Offshore Gambling and GamStop
The phrase "not on GamStop" describes an absence of British jurisdiction and nothing else — not a level of service, not a payout standard, not a guarantee of anything, and that absence is exactly what the Commission's Illegal Markets team is spending its referrals on, with registrar blocks cutting engagement by an average of 91 per cent on the sites they touch. There are competent offshore operators and there are sites whose terms are a snare, and the only reliable way to tell them apart is to read the licence and the clauses that decide what a win is worth. Anyone who wants the protections rather than the novelty can have them; the helpline is on 0808 8020 133, and it is free, around the clock, every day of the year.