Gambling sites UK means the roughly 3,000 domains holding a Gambling Commission licence, plus the offshore sites that hold none. Licence and register checks are the only reliable test, because offshore sites sit outside British self-exclusion and consumer rules, and the Commission's own figures show the black market growing.
The word GamStop is a spelling trap: plenty of people type "gamestop", which is a video game shop, not a self-exclusion scheme. The scheme itself is Gamstop Online, and it is a small, tidy, well-policed machine — 614,738 people on the register as of July 2026, more than one in two of them on the maximum five-year term. What interests me is the size of the gap around it. A self-exclusion is a fence built by licensed operators; an offshore site stands outside the fence entirely, and the regime's answer to that is disruption, not enforcement. The Commission's Illegal Markets team has issued 3,140 cease and desist and disruption notices since April 2024, referred 447,778 Google and Bing URLs and secured 287,961 removals. Across 160 illegal sites, engagement fell an average of 32 per cent afterwards. That is the regulator chipping away, not closing anything down. This page sets out what a British licence actually buys, what the offshore sector looks like in numbers, and where the evidence stops being on the side of the site and starts being on the side of the player.
Table of Contents16
- What A British Licence Actually Protects, And What It Does Not
- The Numbers On The Register, And The Numbers Beside It
- Self-Exclusion Holds For Its Full Term
- ### The Licence Check
- ### The Cost Of The Licence
- ### How Long Money Takes To Come Back
- ### What Happens When Things Go Wrong
- The Check That Decides Everything
- Where The Protections Run Out
- How To Tell A House From A Shopfront
- Five Steps Before Trusting Any Of Them
- How The Regulator Fights The Offshore Trade
- The Bonus Mathematics Nobody Reads Until It Matters
- The Ground Floor, And What It Costs To Stand On
- Questions About Gambling Sites UK
- The Licence Is The Product
What A British Licence Actually Protects, And What It Does Not
Great Britain runs a licensing regime, not a permitting one. Section 33 of the Gambling Act 2005 makes it a criminal offence to provide facilities for gambling without an operating licence, and the provision applies to remote gambling if any of the equipment is in Great Britain — or, under the post-2014 wording, if the provider knows or should know the facilities are likely to be used here. On summary conviction that carries up to 51 weeks' imprisonment, a level 5 fine, or both. The Gambling Commission's position is blunt: it is illegal to offer commercial gambling to consumers in Great Britain without a Commission licence, and holding a licence somewhere else changes nothing.
So the offence sits with the operator, not the player. That is worth stating plainly because a good deal of offshore marketing leans on the idea that the player is doing something criminal. Under the Act the general gambling offences attach to those who provide facilities or invite children to gamble; the adult punter is not the target of section 33.
What a British licence buys is a set of obligations that a site cannot quietly drop. A minuted complaints process with eight weeks to resolve before an independent adjudicator takes it on. Identity verification before you gamble rather than after you win. A wagering cap. A statutory levy contribution. Participation in the national self-exclusion scheme as a condition of the licence itself. None of these are favours; they are the price of trading here.
What it does not buy is a closed border. The Commission can refer a site to a registrar, ask a host to suspend it, ask Google to forget it, and report a transaction to Visa — and since April 2024 it has done all four thousands of times. But as the Commission itself concedes, search-engine removal makes a site harder to find rather than impossible to reach, and the methods that actually bite are the dull ones: registrar blocks and suspensions cut engagement by 91 per cent on average, GEO IP blocking by 60 per cent, a Google removal by 30 per cent. Prosecutions, meanwhile, are vanishingly rare — one commenced across the twelve months from April 2025 to March 2026. The regulator is a nuisance to the black market, not a wall against it.
The Numbers On The Register, And The Numbers Beside It
The starting point is how many people choose to be fenced in. Of the exclusion periods chosen by Gamstop Online registrants in 2025, 29 per cent took six months, 24 per cent a year, 25 per cent five years and 22 per cent the auto-renewing five-year term. Registrations rose 16 per cent year on year in the first half of 2026, with May 2026 setting a record at 12,236 sign-ups. Under-25s accounted for nearly one in three of those self-exclusions, up 26 per cent.
Beside that, the estimates of what happens outside the fence. H2 Gambling Capital puts the amount staked with illegal operators in the UK at £16.6 billion in 2025, up from about £5 billion in 2019, with the legal share of gambling falling from 97 to 92 per cent. Yield Sec, working for the Campaign for Fairer Gambling, split the GB online market at £8.8 billion gross gaming revenue in 2025 — 91 per cent regulated, 9 per cent not. The Commission's own survey work is narrower: among respondents who had gambled online in the past four weeks, 2.5 per cent had engaged with an illegal site, with another 1.5 per cent doing so in the previous year. Its illegal gambling dashboard identified 586 illegal sites accessible to GB consumers in September 2026, and 311 had disruption action taken against them in the second quarter of 2026 to 2027 — 38 per cent more than the previous quarter, with 77 per cent of those disrupted showing reduced traffic.
I do not pretend these numbers reconcile. Industry-commissioned work always finds a bigger black market than the regulator's survey, and the Commission's October 2024 methodology openly admits it cannot see activity hidden behind a VPN. What is not in dispute is the direction: the market is growing faster than the disruption is shrinking it.
Self-Exclusion Holds For Its Full Term
There is no early release. Once registered with Gamstop Online, the exclusion cannot be cancelled or deactivated during the period chosen, and it stays in place after that period ends until the person contacts Gamstop to have it removed. If they do not, Gamstop holds the data through a further automatic seven-year self-exclusion period, during which operators are told that person was previously excluded. Auto-renewal can be switched off only in the final six months of a five-year minimum period. Registrations are never removed early — the scheme's 2025 annual report devotes a section to its refusal to do so.
An offshore site is not a route around that, and no honest description of one should suggest otherwise. Such sites are not connected to the scheme and are not covered by it, because the obligation to participate rests on the British licence — the Commission's licence condition social responsibility code 3.5.5 requires licensees to take part in the national multi-operator self-exclusion scheme, and a breach of a social responsibility code is a breach of licence condition by section 82(1) of the Act. The Commission's own warning notice of 20 January 2025 is explicit that unlicensed sites often target people who have self-excluded through GAMSTOP and may have inadequate social responsibility controls. Using one is not protection. It is a different, unregulated, and usually more expensive relationship.
Signing up to Gamstop Online takes minutes but can take up to 24 hours to take effect, which is a long window for anyone in a hurry. Blocking software is the useful supplement: BetBlocker says it blocks over 1,368,000 gambling sites and 3,100 apps, requires no registration and is free worldwide, while Gamban blocks licensed and unlicensed sites and is built to be as hard to remove as possible — though since TalkBanStop funding ended on 31 March 2026 it has cost £4.99 a month or £29.99 a year in England and Scotland, and is free only in Wales. The National Gambling Helpline, run by GamCare, is free on 0808 8020 133, 24 hours a day.
### The Licence Check
A UK regulator publishes the list; an offshore one may not. The Gambling Commission keeps a public register of licensed businesses, and its advice is to click through and check whether the site's activities and its domain names match the entry. That second part matters more than it sounds, because operators run many domains under one licence and a lookalike domain is often unlicensed.
Check the imitation before the substance. A Curaçao certificate must show the domain in front of you: if the certificate names a different domain, the seal belongs to another operator and the site should be treated as unauthorised. Curaçao's own policy is that clicking a Certificate of Operation seal must redirect to cert.cga.cw, and that a seal differing in design, colour or format means the site is not authorised. Anjouan's certificates carry a unique licence number and a QR code linking to a public register — a certificate that cannot be verified there should not be relied on at all. These are two-minute tests that catch a large share of impostors.
Use the register, not the homepage badge. MGA publishes a list of Unauthorised URLs declaring any reference to a Maltese licence on them to be false and misleading, and Abidjan-era Curaçao marks are now worthless: the legacy "orange" sub-licence certificates ended on 15 October 2025, the four former master licensors' licensing activities ceased between 18 August 2024 and 31 January 2025, and Curaçao's own authority warns that a historic /JAZ number is not independent proof of a current licence.
### The Cost Of The Licence
The annual fees tell you what this market costs to enter. A Curaçao B2C licence costs EUR 4,592 to apply for, then EUR 47,450 a year — a EUR 24,490 licence fee plus a EUR 22,960 supervisory fee. Anjouan is cheaper: EUR 17,828 to issue and the same to renew annually.
Malta sits well above both: a EUR 25,000 fixed annual licence fee, a EUR 5,000 application fee, gaming tax of 5 per cent of revenue, and minimum paid-up share capital of EUR 100,000 for the main B2C licence types. That is the price of a regime that publishes unauthorised-domain lists. A licence is a cost, and the cost shapes the operator.
Cheapness is a clue, not proof. Costa Rica has no comprehensive gambling licensing regime at all — the "data processing license" the industry sometimes cites is not a licence in the legal sense — and its Legislative Assembly rejected the bill in early 2026 that would have created a mandatory one. A site claiming a Costa Rican licence is claiming something that does not exist.
### How Long Money Takes To Come Back
The Commission's own data for June to September 2024 covers 44.2 million withdrawals at large online operators: 96.3 per cent cleared automatically, 3.5 per cent within 24 hours, 0.1 per cent up to 48 hours. Earlier data from some of the largest firms showed around 99 per cent approved, processed and fulfilled within 24 to 48 hours.
That is the standard, and the complaints record shows how often it is missed. Problems with withdrawals have been the number one subject of consumer complaints to the Commission's contact centre, at around 2,000 a year by July 2024; coded cases fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025. The Commission's 2024-25 annual report says issues relating to withdrawals continue to cause most of the complaints it receives. Reverse withdrawals have been banned outright since 31 October 2021 under requirement 14B — "consumers must not be given the option to cancel their withdrawal request."
The timing rules here are deliberately not a stopwatch. There is no fixed maximum number of days in the LCCP; the regime relies on fair and open terms under licence condition 7.1.1, which requires that terms and consumer notices are not unfair within the meaning of the Consumer Rights Act 2015, and on condition 17.1.1, which forbids demanding extra information at withdrawal that the licensee could reasonably have asked for earlier. In October 2026 one licensee agreed a £900,000 regulatory settlement including unnecessarily delaying consumer withdrawals, where a term permitted only one withdrawal request at a time and every fifth or tenth withdrawal was manually reviewed. The banks move far faster than most of these sites: where the Faster Payments scheme applies, individual banks set their own per-payment ceilings, and over 90 per cent of transactions complete in under two seconds.
### What Happens When Things Go Wrong
A British-licensed operator must have an arrangement for referring an unresolved dispute to an approved alternative dispute resolution provider, free of charge, if it is not resolved within eight weeks of the complaint. The Commission is a regulator and not an ombudsman: it cannot get money back for an individual, though it records the complaint.
The caseload is small and the outcomes are unsentimental. IBAS handled 3,721 domestic disputes in 2024-25, 217 of them banking or financial, with an average completion time of 20 days; 65 consumer complaints were upheld, 693 not upheld and 737 settled pre-ruling. eCOGRA received 911 disputes in the year to 30 September 2025, of which 150 were valid deposits-and-withdrawals cases; 17.8 per cent of completed disputes went the consumer's way. Note the routine failure in the invalid cases: 361 of 499 invalid disputes had not gone through the operator's own complaints procedure first. The process has an order, and skipping the first step wastes months.
Offshore, the picture is thinner and depends entirely on which badge is on the wall. Anjouan requires licensees to name an approved ADR provider in player-facing terms and expects complaints resolved within 30 days before escalation, with EGIS ADR, Axion ADR, iGaming ADR and one listed provider as the current options. Kahnawà:ke employs a full-time disputes officer but writes self-exclusion into its own rules as permanent and irrevocable, with funds forfeited to charity if a player breaches it. Malta takes complaints in English or Maltese on a form it reviews and recommends trying the operator first. None of these gives a player a route to the Gambling Commission.
The Check That Decides Everything
Every other test on this page collapses into one question: who verified the person opening the account, when, and against what?
The British answer is licence condition 17, introduced on 7 May 2019, which requires a licensee to obtain and verify information establishing identity before the customer is permitted to gamble, with name, address and date of birth expressly included. It sits alongside the money-laundering rules. Under the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017, a remote casino must identify and verify when a customer deposits or withdraws €2,000 or more — a threshold that applies to a single transaction or to transactions that appear to be linked, and for online play, transactions within one logged-on period count as linked.
The first time, this is usually invisible. Companies often match an account against credit reference agencies and the electoral roll, and no documents are needed; where that fails, a passport, driving licence or household bill is the ordinary ask, and the Commission says it cannot give a timescale because the process varies. Remote casinos may use the "hybrid approach" — identify and verify age at registration, defer full verification to the €2,000 threshold — and where a shared wallet spans casino and other products, the duties begin when the customer enters the casino section and deposits.
Later it changes character. Checks are ongoing and must be refreshed when circumstances change; source of wealth becomes relevant for higher-risk accounts. This is where the trouble starts, and where the rule that protects people most is the least understood: condition 17.1.1 states that a withdrawal request must not trigger a demand for information the licensee could reasonably have requested earlier. That prohibition does not override an anti-money-laundering obligation, but it does mean that age and identity checks belong before the first bet, not after the first win. The Commission says onboarding on partial or inaccurate information — initials instead of a forename, a nickname, a commercial address — is not sufficient, and warns specifically that a middle name used as a forename can create mismatches with the Gamstop register, undermining the exclusion the person actually relies on.
The warning signs are consistent. Documents requested only at withdrawal. A "fuzzy match" that never quite resolves. A request for a selfie, which the Commission says a business may make where it suspects fraudulent activity such as identity theft. A demand for source of funds with no explanation of which legal obligation is being met. And the blunt one: un-staked deposits remain the customer's, and no term may allow an operator to confiscate a deposit balance on the ground that identity verification failed. The Commission's 2026 blog records that over a quarter of complaints reaching its contact centre concern identity verification — raised almost always by someone who was asked for documents only at the point of withdrawal.
Where The Protections Run Out
Cross the border and the rulebook changes hands. The Gambling Commission's remit covers sites that trade or advertise to GB customers, and those must hold a Commission licence; the Commission's 2026 risk assessment rates the remote casino sector as high risk for money laundering, and reports a rise in false documentation, deepfake videos and AI-generated face swaps used to bypass checks.
A table of what changes is the honest way to put it.
| Criterion | British-licensed site | Offshore site with no UK licence |
|---|---|---|
| Entry cost per year | Not applicable — compliance, audit and levy lie on top of the fee | Curaçao EUR 47,450; Anjouan EUR 17,828; Malta EUR 25,000 plus 5% tax |
| Withdrawal speed | 96.3% of 44.2m withdrawals cleared automatically (June–September 2024) | No published data; terms frequently allow delay |
| Wagering requirement | Capped at ten times bonus funds since 19 January 2026 | Typically 25× to 50×; one operator's published term is 25× |
| Identity check timing | Before the customer gambles, per licence condition 17 | Varies; often only at withdrawal |
| Complaints route | Approved ADR within eight weeks; IBAS averaged 20 days in 2024-25 | Contract Terms and a nominated ADR; no regulator route |
| Self-exclusion | Gamstop Online applies as a licence condition (SR code 3.5.5) | Not connected to Gamstop; schemes are the operator's own |
The British wagering cap is the sharpest contrast. LCCP Social Responsibility Code 5.1.1, in force since 19 January 2026, forbids wagering requirements over ten times, and the Commission's own consultation estimated it "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements." Offshore, an operator that publishes its terms at 25× is being relatively moderate; trade coverage puts typical welcome offers at 35× to 50×, and no-deposit bonuses at 40× to 60× with a cash-out cap. One offshore operator's published term caps the amount withdrawable from winnings generated with bonus funds at 300 per cent of the credited bonus amount, with the excess voided. In Britain, guidance forbids any maximum limit on withdrawing from the deposit balance; the Commission's own example of a prohibited term is "You may withdraw up to £50 per day and up to £500 per week."
Maximum bet clauses are the quieter trap. One offshore operator caps bets while wagering at €5 for standard players and €10 for VIPs, and rejects anything above the limit; another states its casino maximum is 20 per cent of the deposited amount and that breach may mean account closure, forfeiture of the bonus and loss of winnings generated while wagering.
Bank blocks and card rules stop where the licence stops. Eleven banks offer gambling blocks — Bank of Scotland, Barclays, Halifax, HSBC, Lloyds, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling — declining payments under gambling merchant category codes at card level, with a 48- or 72-hour cooling-off when switched off. Those blocks are card-level and do not follow the money onto a crypto deposit. Nor is there a credit card route into a British-licensed site: the credit card ban has been in force since 14 April 2020 under licence condition 6.1.2.
How To Tell A House From A Shopfront
None of the headings above is a judgement of taste. They are tests, and here is how to run them.
### The Licence Names The Domain
Check the regulator's own register and confirm the domain in front of you appears on it — the Commission explicitly advises matching both the business's activities and its domain names. For Curaçao, click the Certificate of Operation seal and confirm it redirects to cert.cga.cw with the same domain and the same design, colour and format. Any mismatch means the certificate belongs to somebody else.
### The Terms Are In Front Of You, Not Four Clicks Away
Significant conditions of an offer must be given transparently and prominently, and where displayed online, in full no further than one click away. If the wagering figure, the maximum cash-out and the maximum bet are only findable after creating an account, that is the answer.
### The Complaints Door Opens Before The Money Does
A regulated site tells a player it can withdraw the deposit balance at any time, including while a bonus is pending, and it processes complaints within eight weeks without being pushed. If the only route offered is a support inbox and a promise, the terms are doing the work that a complaints procedure should.
### Identity Was Sorted Before, Not After
If a site asks for a passport, a utility bill and a selfie only when a withdrawal is requested, it has already told the player what it thinks its obligations are. The Commission's fair and open terms condition exists for exactly this reason, and the complaint data shows it is the most common failure in the sector.
### The Money Is Described As Protected Or Not
Operators must state in their terms whether customer funds are protected on insolvency and which of the three ratings — not protected, medium protection, high protection — applies, in writing, with the customer acknowledging before gambling. A site that cannot say which rating it holds has not told the player where the money actually sits.
Five Steps Before Trusting Any Of Them
- Verify the licence on the regulator's public register and confirm the domain matches. Reason: an unlicensed operator faces no consequence for changing its terms after the fact, and no regulator will hear the complaint.
- Read the withdrawal terms before the first deposit, not after the first win. Reason: this is the clause that decides how long money stays where it is, and the Commission's contact centre data shows it is where most disputes begin.
- Read the bonus conditions in full, including the maximum cash-out and the maximum bet while wagering. Reason: a compliant British offer caps wagering at ten times, and anything much beyond that is being paid for out of the player's own winnings.
- Check whether customer funds carry an insolvency rating, and which one. Reason: a separate client account does not guarantee the money back, and the operator must state the rating anyway.
- Decide in advance how a dispute would be escalated, and check that the route exists. Reason: ADR providers reject complaints that never went through the operator first, and 361 of 499 invalid eCOGRA disputes in one year failed on exactly that.
- Set a deposit limit at the point of the first deposit, as the rules now push customers to do, and review it every six months. Reason: the prompt exists because limits set in advance are the ones that survive a bad night.
How The Regulator Fights The Offshore Trade
The Commission has no police force and very little appetite for prosecutions, so it does the unglamorous work: referral, notification and repeated pressure.
Its own report of 21 October 2025 covers the stretch from April 2024 onwards — 3,140 cease and desist and disruption notices, made up of 2,032 cease and desist notices, 774 registrar referrals, 402 host referrals and 3 payment provider referrals. It referred 447,778 Bing and Google URLs (339,757 to Google and 108,031 to Bing) and secured 287,961 URL removals. Referrals to search engines climbed from 124 in July to September 2024 to 321 in April to June 2025, then 366 in April to June 2026, then 1,835 sites and 7,677,211 URLs in July to September 2026 — the volume rising faster than anyone's ability to describe it.
The lesson from the data is which pressures work. Registrar blocks and website suspensions each cut engagement by an average of 91 per cent, ahead of GEO IP blocking at 60 per cent, Bing removal at 52 per cent, Google removal at 30 per cent and Facebook removal at 8 per cent. The Commission's own conclusion is that search-engine removal makes a site harder to find without fully blocking access. Payment reporting is described as critical and still early-stage: the first referral to Visa came in January 2025, with three more since.
Individual cases do land. In May 2025 the Commission reported that TGP Europe was leaving the GB market following an investigation, that sites it had operated were now unlicensed and might not provide protections against criminality or gambling-related harm, and that it had contacted five football clubs about sponsorship arrangements with unlicensed gambling businesses. In April 2020 it suspended the licences of two operators for failing to integrate GAMSTOP by the 31 March deadline.
### The Offshore Regulators, Weighed Honestly
The offshore world is not uniform and it is worth saying so. Curaçao has genuinely changed: the National Ordinance on Games of Chance took effect on 24 December 2024, the Curaçao Gaming Authority is now the direct licensing authority, the master-licence model is gone, the legacy orange certificates ended on 15 October 2025, and provisional licences granted to holders under the old regime expired on 24 December 2025. Supplier licensing becomes fully mandatory on 24 December 2026. That is real reform of a jurisdiction that spent two decades as a byword for the opposite.
It is also half-built. The CGA announced on 7 October 2026 that its previous online gaming portal would not return to service and that a replacement mechanism for verifying licensed domains is still being worked on because the digital seal may be affected. An aggregator reading the register counted 704 licences held by 698 operators, 552 active, as of 6 November 2026 — a figure from a third-party tracker, not the authority itself, and one that should be treated as indicative.
Anjouan is the harder case, and the one where British readers deserve the ambiguity stated rather than smoothed over. Its authority publishes segregation-of-funds, certified RNG and AML requirements, issues B2C and B2B licences at EUR 17,828 with EUR 500 per additional domain, and states it imposes no territorial restriction under Anjouan law. A legal opinion dated 19 September 2024 and reconfirmed in February 2026 by a firm regulated in England and Wales is said to confirm the authority's status — that comes from a licensee's own statement and is not independent. Against it sits an ABC News investigation of 31 December 2025 reporting that the licensing arm claims over 1,300 gambling licences at around EUR 17,000 a year, that Comoros financial intelligence officials described it as operating illegally, and that a former attorney-general called the licensing entity "an illegal entity" and said the offshore financial authority lost recognised-regulator status under Comorian banking laws in 2013 and 2015. In June 2026 the regulator itself said an Anjouan licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world." Read that last sentence twice. It is a licensing authority telling you it cannot license anyone into Britain.
Kahnawà:ke has the longest history — regulating interactive gaming since 1999, hosting licensees at a single data centre, and operating a logo programme that generates a certificate of good standing at a click. Its own permit fees rise on 1 January 2027, with the client provider application going from USD 35,000 to USD 40,000. It also suspended one holder's authorisation effective 29 September 2026.
The Bonus Mathematics Nobody Reads Until It Matters
Bonus terms are where a bad deal hides behind a generous number, and the details are all published if anyone looks.
In Britain the cap is now hard. Since 19 January 2026, licensees may not apply wagering requirements over ten times, a wagering requirement being defined as where a customer must make wagers totalling a particular value before funds become withdrawable. Mixed-product promotions requiring two or more types of gambling were banned the same day: "bet £5 and get a £10 free bet" is fine, "bet £5 to get 20 free spins" is not, and a prize that mixes both is not. The Commission chose a cap over an outright ban precisely because it judged an outright ban would push licensees towards terms preventing customers cashing out bonuses at all.
Offshore, the numbers speak for themselves. An operator publishing a 25× playthrough is being restrained; the same operator's contribution chart gives slots 100 per cent, table games 20 per cent, video poker and blackjack 10 per cent, roulette and baccarat 5 per cent, and craps, jackpot games and live dealer 0 per cent unless stated otherwise. A player who spends the wagering period on roulette has been moving at a twentieth of the required speed. Another publishes that for deposit bonuses the required bet amount is the bonus multiplied by the wager, and that the deposit itself is not included in the calculation — a detail that doubles the effective requirement in most cases.
The clauses that catch people are the ones about behaviour. One operator's terms describe prohibited play as including low-margin, equal or zero-risk bets, switching from a low-weighted game to a high-weighted one after a large win, and delaying free spins or bonus features until after wagering is met — and provide that breach may mean account closure, forfeiture of the bonus and loss of winnings generated during wagering. British guidance requires that such promotional play restrictions specify all prohibited patterns without leaving the operator sole discretion to decide when they have been breached, and that abuse clauses live in separate terms from promotional restrictions. That is a small, unglamorous protection, and it is the sort of thing offshore terms are under no obligation to copy.
The Ground Floor, And What It Costs To Stand On
Identity is the floor everything else is built on, and the contrast is easiest to see in one place: the Act itself.
In Great Britain, a remote casino must identify and verify a customer at €2,000 of deposits or withdrawals, single or linked, and licence condition 17 requires identity verified before gambling in any case. Offshore jurisdictions publish standards in the same language, and there is no obligation on them to enforce those standards against a British customer at all. When the Commission's own authority says Anjouan licences are not universal authorisations, the appeal of an offshore licence starts to look like what it is: commercial arbitrage in the cost of compliance, at a couple of thousand pounds a year less than the British standard costs to run.
There are legitimate reasons a person ends up on an offshore site — curiosity, a bonus advertised at a figure no British site can legally offer, an old account from before the rules changed. None of them changes the arithmetic. There is no regulator to escalate to, no eight-week clock, no ADR, no funds rating, no cap on wagering, and no route back into self-exclusion protection if something goes wrong. The National Gambling Helpline is free on 0808 8020 133, 24 hours a day, and it does not care where the account was held.
Questions About Gambling Sites UK
### What is the difference between a UK gambling site and an offshore one?
A UK site holds an operating licence from the Gambling Commission and must follow the LCCP: identity verified before gambling, wagering capped at ten times, reverse withdrawals banned, an approved ADR for disputes and participation in Gamstop as a licence condition. An offshore site holds no such licence, is not connected to Gamstop, and is not bound by any of those rules. The Gambling Commission states plainly that offering commercial gambling to GB consumers without its licence is illegal for the operator.
### Are gambling sites not on GamStop legal in the UK?
The scheme applies only to operators licensed in Great Britain, so a site outside it is not breaching Gamstop by trading there. The legal question is different: providing gambling facilities to consumers in Great Britain without a Commission licence is an offence under section 33 of the Gambling Act 2005, and the offence sits with the operator. A self-exclusion holds for its full term and stays in place until the person contacts Gamstop to remove it; an offshore account is not a route round it.
### How many online gambling sites are there in the UK?
No one publishes a definitive count of licensed domains, because operators run many under a single licence. The clearer numbers are the illegal ones: the Commission's dashboard identified 586 illegal sites accessible to GB consumers in September 2026, and its Illegal Markets team issued 3,140 cease and desist and disruption notices between April 2024 and October 2025. The Commission advises checking the public register rather than counting.
### What gambling sites accept credit cards in the UK?
None, for remote gambling. The credit card ban has applied since 14 April 2020 under licence condition 6.1.2, covering online betting, casino, bingo and lotteries taking payments online or by phone. Operators must also ensure that money loaded into an e-wallet did not come from a credit card. The ban does not extend to buying lottery tickets or scratchcards in a shop or by post.
### How long does a withdrawal take at a UK gambling site?
The Commission's data for June to September 2024, covering 44.2 million withdrawals, recorded 96.3 per cent cleared automatically, 3.5 per cent within 24 hours and 0.1 per cent up to 48 hours. There is no fixed maximum of days in the LCCP. Instead, condition 17.1.1 forbids asking at withdrawal for information the operator could reasonably have requested earlier.
### Can an operator keep money because identity checks were not finished?
Not on that ground. Un-staked deposits remain the customer's, and no term may let an operator confiscate or deduct a deposit balance because identity or age verification failed. The CMA's position is that consumers are legally entitled to deposited money, winnings from money deposited and gambled, and bonus winnings where conditions are met. Where a business delays a withdrawal over insufficient ID it may breach licence condition 17.
The Licence Is The Product
A British gambling licence is not a badge of virtue; it is a set of enforceable promises with a price attached, and the offshore alternative is cheaper precisely because it promises less. The evidence that settles it for me is not the fee schedule but the enforcement ledger: 287,961 URLs removed, 1,835 sites referred in a single quarter, and an average engagement drop of 32 per cent across 160 illegal sites — a regulator doing real work with a mop while the water keeps rising. Meanwhile 614,738 people are on the register as of July 2026, and the Commission fined one operator £900,000 in October 2026 for making withdrawals deliberately awkward.
Anyone who wants the free, confidential version of this conversation can call the National Gambling Helpline on 0808 8020 133, day or night.