New Gambling Sites UK and Commission Enforcement

New gambling sites UK players meet in 2026 come in two kinds: those holding a Gambling Commission licence, and offshore ones that hold no British licence at all. The second kind is not covered by UK protections, cannot be blocked by GamStop, and sits squarely in the sights of the Commission's Illegal Markets team.

Every few weeks a fresh batch of casino domains appears, and the trade press announces them the way it announces anything with a sign-up offer attached: brightly, and without much curiosity about who is behind them. I have been reading those announcements for years, and the interesting part is never the site. It is the licence at the bottom of the page, and whether the regulator has already started writing to the registrar about it.

The Gambling Commission's position is not subtle. Since April 2024 its Illegal Markets team has issued 3,140 cease and desist and disruption notices — 2,032 cease and desist notices, 774 registrar referrals, 402 host referrals and three payment provider referrals — referred 447,778 search engine URLs and secured 287,961 removals. Those are the regulator's own figures, published in October 2025 and updated since.

What follows is a look at how the new-site market actually works: which sites are British-licensed and bound by British rules, which are offshore and bound by very little, what the Commission does about the second group, and how anyone sensible tells them apart. Self-exclusion, wherever it comes up here, is a fact rather than a workaround: a GamStop exclusion runs for its full term and then stays in place until the person contacts GamStop to remove it. Offshore sites are never a way round that, however they are marketed.

New UK Gambling Sites, and the Licence at the Bottom of the Page

The head keyword throws two different markets into one basket, and the basket is the problem. A "new gambling site" is simply a domain that has not been around long. Whether it is a British one depends entirely on a licence the Commission has granted, and the Commission publishes the answer: its public register lists licensed businesses and the domain names they are permitted to trade under. Five minutes there settles what a landing page will not.

The practical differences are not cosmetic, and they follow from the licence rather than from the operator's good manners.

A Commission licence brings GamStop participation as a condition. Since 31 March 2020 every online operator has had to be part of the national multi-operator self-exclusion scheme under social responsibility code provision 3.5.5 of the Licence Conditions and Codes of Practice. Since April 2020 that has meant checking the entire customer base at least every 24 hours. Two operators had their licences suspended on 3 April 2020 for missing the original integration deadline — a reminder that the condition has teeth.

It brings the £5 maximum stake per game cycle on online slots, in force since 9 April 2025, and £2 for players aged 18 to 24, live since 21 May 2025. It brings the £2,000 customer due diligence threshold under the Money Laundering Regulations, a ban on credit cards since 14 April 2020, and wagering requirements on bonus funds capped at ten times from 19 January 2026 — a cap the Commission introduced after finding some licensees were applying terms up to 60 times.

It brings the whole withdrawal rulebook: reverse withdrawals permanently banned under RTS 14B since 31 October 2021; licence condition 17.1.1 barring an operator from demanding extra documents at withdrawal that it could reasonably have asked for earlier; the ban on any maximum limit on what a customer may withdraw from their deposit balance.

And it brings a route to complaint. A licensed operator must offer access to an approved alternative dispute resolution provider free of charge where a dispute is unresolved after eight weeks. ADR providers handled the volume: eCOGRA's Great Britain report for 1 October 2024 to 30 September 2025 recorded 911 disputes, of which 150 valid ones concerned deposits and withdrawals, resolved on average in 31 days, with 17.8 per cent ruled in the consumer's favour. IBAS handled 3,721 domestic disputes in 2024-25, including 217 categorised as banking or financial, with an average completion time of 20 days.

Offshore, none of that applies. The Commission can only regulate gambling websites that trade or advertise to customers in Great Britain, and those must hold a Commission licence. It states plainly that it is illegal to offer commercial gambling services to consumers in Great Britain without one — including where the operator holds a licence somewhere else.

Offshore Gambling Licence Standards

When an offshore casino wants to look regulated, it buys a certificate from a small jurisdiction and prints a seal. Three of those jurisdictions dominate what is offered to British players, and all three have moved in the past two years — though not always in the direction the marketing implies.

Curaçao, and the Trouble With the Old Orange Seal

Curaçao has genuinely rebuilt its regime. The National Ordinance on Games of Chance took effect on 24 December 2024, making the Curaçao Gaming Authority the direct licensing and supervisory authority and ending the old master-licence model. Licensing activities ceased for the four former master licensors on dates running from 18 August 2024 to 31 January 2025. The legacy orange sub-licence certificates ended on 15 October 2025.

Which means a site still showing a historic /JAZ number or an orange seal is showing a document with no force. The Curaçao authority says so itself: a legacy seal must not be treated as independent proof of a current licence. It also says clicking a genuine Certificate of Operation seal must redirect to the authority's own verification domain, and that a certificate naming a different domain from the one in front of you belongs to another operator entirely.

The money says something too. A B2C application costs a one-off, non-refundable €4,592, and the annual total is €47,450 — €24,490 to the National Treasury and a €22,960 supervisory fee. That is not trivial, which is exactly why the older, cheaper paperwork lingers on so many pages.

Anjouan, Where the Certificates Are Cheap and the Questions Are Not

Anjouan, part of the Union of the Comoros, regulates internet gaming under legislation adopted in 2005. Its published fees are €17,828 for B2C licence issuance and the same again annually for renewal, with €500 per additional domain. Anjouan Gaming states its licences carry no territorial restrictions under Anjouan law — and, in a statement on 10 June 2026, that an Anjouan licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world", and that no licensing authority can exempt an operator from local law.

That is a regulator conceding the central point. An ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around €17,000 each per year, and quoted a former attorney-general of the Comoros describing it as "an illegal entity" — a claim I can only report as a claim, from a source outside the regulator. Anjouan's own certificate framework expects a unique licence number and a QR code linking to a public register, and says a certificate that cannot be verified there should not be relied on.

Kahnawà:ke, Malta and the Regimes With Actual Supervision Behind Them

The Kahnawà:ke Gaming Commission has regulated interactive gaming since 1999, and its Licence Certificate Program lets a player click the Commission's logo to generate a Certificate of Good Standing confirming whether the site holds a valid permit. That is a real check, and its own February 2027 fee rises — a Client Provider Authorization application going from USD 35,000 to USD 40,000 — show a regime that charges like a regulator. It also suspends people: a Client Provider Authorization held by Polar Ventures SDRL was suspended on 29 September 2026.

Malta is the closest thing offshore to a regime a British player would recognise. The Malta Gaming Authority charges a one-time €5,000 application fee, a fixed €25,000 annual licence fee and 5 per cent gaming tax on revenue, and requires €100,000 paid-up share capital for its main B2C licence types. It publishes a list of unauthorised URLs, and it accepts complaints. None of that makes a Maltese licence a British one.

And Costa Rica? No comprehensive licensing regime at all. The "data processing licence" quoted in sales copy is not a licence in the legal sense, and a bill that would have created a mandatory regime was rejected in early 2026.

What the Regulator Does About Unlicensed Sites

Here is the part the affiliate pages never mention. The Commission does not stand still, and its own data shows how it works. Since April 2024: 3,140 cease and desist and disruption notices. Referrals of 447,778 Bing and Google URLs, with 287,961 removals secured. Over the monitored period from May 2024 to July 2025, just over 1,000 unique illegal gambling websites were accessed by consumers in Great Britain. The number identified through the Commission's affiliate-page method rose from 364 in May 2024 to 535 in July 2025.

The method matters, because the outcomes differ wildly. Registrar blocks and website suspensions produced the largest average fall in engagement — 91 per cent each — ahead of GEO IP blocking at 60 per cent, Bing removal at 52 per cent, Google removal at 30 per cent and Facebook removal at 8 per cent. Across 160 illegal sites for which traffic data existed, the average decrease after disruption was 32 per cent. The Commission is candid that search-engine removal makes a site harder to find without blocking access; taking the domain off its registrar is the move that hurts.

The tempo has picked up. In January to March 2026 the Commission referred 226 websites to search engines and issued 98 cease and desist notices. In April to June 2026 it referred 366 websites and 147,721 URLs. In July to September 2026 it referred 1,835 websites and 7,677,211 URLs, and issued 546 cease and desist notices. Criminal prosecutions, meanwhile, have not followed: across April 2025 to March 2026, every quarter recorded zero or one prosecution commenced, one in total.

Whether any of this is winning is genuinely contested. The Commission's November 2026 analysis estimates that 0.6 per cent of respondents across the whole population engaged with illegal gambling websites in the past four weeks, and among those who had gambled online in the past four weeks, 2.5 per cent had done so, with another 1.5 per cent in the past year. H2 Gambling Capital, a market-intelligence firm, estimates £16.6 billion was staked with illegal operators in the UK in 2025, up from about £5 billion in 2019, with the legal share of gambling falling from 97 per cent to 92 per cent over the same period. An industry-commissioned Frontier Economics study from September 2024 put it far lower, at £2.7 billion a year online. I would treat the softest of those with suspicion and the hardest with respect, but the direction is the same. The Illegal Gambling Taskforce, whose terms of reference DCMS published on 13 May 2026, has a year to do something about payments, advertising and enforcement.

Withdrawal Standards for Licensed and Offshore Sites

The honest answer to what a player can expect when cashing out is that British licensing does not set a fixed number of days — the LCCP contains no stated payout deadline. It relies on the fair-and-open condition, the identity-verification condition and the prohibition on unfair terms. What it does have is data on how the licensed market behaves, and the comparison with offshore terms is the most useful one on this page.

Two rows in that table deserve their own paragraph.

The first is bonus wagering. The 10× cap is the single most concrete consumer protection added to the British market in years, and it exists because the Commission consulted on a cap of 1, 5 or 10 times and chose the loosest option on the table, reasoning that an outright ban would push licensees towards terms preventing cash-out altogether. It also banned mixed-product promotions from the same date. Neither rule follows an offshore site anywhere.

The second is identity checks, and this is what the whole topic turns on, so it gets its own section.

Identity Verification Procedures

Identity verification is the mechanism that decides whether a withdrawal takes four minutes or four days, and it works differently on the first visit than it does afterwards.

On a properly run British site, Licence Condition 17 requires identity to be established before the customer is permitted to gamble, with the information including name, address and date of birth. Most people are verified electronically against credit reference and electoral roll data and never see a document request at all. A remote casino may use what the Commission calls the hybrid approach — identifying the customer and verifying age at registration, then deferring full verification until the €2,000 threshold under the Money Laundering Regulations is triggered. The Commission has since pushed expectations forward, saying it expects identity and age checks before a customer deposits or stakes, and that onboarding on partial information is not sufficient.

Later, things change. Verification becomes ongoing: it must be refreshed when circumstances or personal details shift, and higher-risk accounts need source of funds, sometimes source of wealth. That is where the delays live. A financial vulnerability check — a publicly available data check for flags such as a bankruptcy order, a County Court Judgment or an Individual Voluntary Arrangement — became a licensing requirement in August 2024 at £500 net deposits over a rolling 30 days, and the threshold dropped to £150 on 28 February 2025. In the three months after it started, operators ran these checks on 7 per cent of active accounts on average, with 78 per cent returning within ten minutes.

The warning signs are consistent. A site that takes deposits happily and only asks for documents when money is moving the other way is the classic pattern: more than a quarter of complaints reaching the Commission's Contact Centre concern identity verification, raised by customers asked for paperwork only at withdrawal. Licence condition 17.1.1 is designed to stop exactly that. So is the principle that a customer's un-staked deposits remain their and cannot be confiscated for failing verification — a principle the CMA wrote into undertakings from six operators, including Progress Play's specific commitment not to remove a player's money over unmet identification requirements.

Delays justified by money-laundering obligations are a different matter and can be lawful: where an operator suspects money laundering it must file a Suspicious Activity Report and obtain a defence from the National Crime Agency before returning funds. The Commission's line on that is careful — such obligations may necessitate a delay but do not give operators the right to confiscate deposits.

The simplest defence is boring. Check what documents a site says it may ask for before the first deposit, because a licensed operator is expected to tell customers that up front. If the terms never mention verification and the landing page mentions only speed, that tells you which half of the business was designed first.

Five Signs a New Gambling Site Can Be Trusted

None of these are guarantees. They are the checks that separate a site run by an operator with something to lose from a domain run by someone with nothing to lose.

The Licence Number Resolves to a Live Register Entry

The Commission tells consumers to check that a business holds a British licence and to click through to the public register to see whether the site's activities and domain names match. For a Curaçao claim, click the Certificate of Operation seal and confirm it redirects to the authority's verification domain and names the domain you are on. For Kahnawà:ke, click the logo and generate a Certificate of Good Standing. A seal that leads nowhere, or to somebody else's domain, is the whole answer.

The Terms Name the Regulator and the ADR Provider

A licensed operator must offer access to an approved ADR provider free of charge where a complaint is unresolved after eight weeks, and must let customers raise complaints for at least six months from the incident. If the terms name no dispute route at all, or route everything to an internal department with sole discretion, there is no second opinion to be had. ADR providers will not take customer-service complaints or disputes over a refused bet, so the route matters most on exactly the disputes a player would care about.

The Bonus Terms Are Readable in One Click

Significant conditions must be given transparently and prominently, and online in full no more than one click away. Beyond that, the numbers should be checkable: a British site cannot exceed a 10× wagering requirement, cannot make the receipt or value of an incentive depend on gambling for a set period at a set frequency, and cannot mix product types within one offer. A term allowing the operator sole discretion to void winnings — "may" or "reserve the right" — is the sort of clause the Commission has treated as unfair; one operator was fined £170,000 in July 2025 for failures including exactly that wording.

The Customer Funds Statement Has a Rating Attached

Licensees holding customer funds must state in writing whether those funds are protected on insolvency, at what level, and by what method, using the Commission's three ratings: not protected, medium protection, high protection. The disclosure must be acknowledged before funds can be used for gambling. An operator rated "not protected" must remind the customer every six months. A separate client bank account does not mean the money comes back if the business fails, and funds staked in an open bet are outside the protection entirely.

Withdrawal Speed Matches the Withdrawal Data

The Commission's figures for June to September 2024 cover 44.2 million withdrawals by customers of large online operators: 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours and 0.1 per cent took up to 48 hours. Complaints coded "Withdrawals and/or financial transactions" fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025. Withdrawals were still the number one subject of consumer complaints as recently as 2024, so any claim of instant cash-out should be read against operator-specific terms — maximum withdrawal limits on deposit balances are prohibited, but a charge of no more than the direct processing cost, or a reasonable limit on the number of separate withdrawals, is not.

How to Check a New Site Before Joining

Six steps, each with a reason, all of them ordinary things anyone can do from a kitchen table.

1. Find the operator's name and licence number in the footer, then search the Commission's public register for both. The register shows which domains a licence covers. A site trading on someone else's licence, or on an expired one, is a site with no regulator behind it.
2. Click any offshore seal and follow it. A genuine Curaçao Certificate of Operation redirects to the authority's verification domain and the certificate names your domain. If it goes nowhere, or names a different site, the seal is decorative.
3. Read the withdrawal section of the terms before depositing. Look for stated processing times, whether ID may be requested, any maximum withdrawal limit on the deposit balance, and whether a withdrawal fee is capped at cost. These clauses decide how the relationship ends, and they are the hardest to change later.
4. Check the bonus terms, not the banner. Confirm the wagering multiple, whether it applies to bonus only or deposit plus bonus, the maximum bet while wagering, any maximum cash-out, which games count towards wagering, and the expiry period. A 40× requirement on a deposit-plus-bonus base is roughly eight times the wagering a British licence permits.
5. Look for the customer funds statement and its rating. It must be disclosed in writing before funds are used for gambling. A "not protected" rating is not disqualifying by itself, but it should be a considered decision rather than a surprise discovered from an administrator's notice.
6. Test the support route and note the dispute path. Find the ADR provider named in the terms and confirm it is on the Commission's approved list. If a complaint must go to an internal department with no independent review, the operator has appointed itself the judge.

At any point in that process, if the answer is a site with no British licence, remember what it means: UK protections do not apply, and there is no route to GamStop. Support is free and available — the National Gambling Helpline run by GamCare on 0808 8020 133, 24 hours a day, every day of the year, via phone, live chat and WhatsApp. GamCare's colleagues at GambleAware, GamFam, Gamblers Anonymous, Gam-Anon, Citizens Advice and the NHS gambling clinics all take the same route to the same people.

Questions About New Gambling Sites

Are new gambling sites UK safe to use?

Only if they hold a current Gambling Commission licence, which the public register confirms against the domain name. A British licence means GamStop participation, the £5 online slots stake limit, the 10× bonus wagering cap and access to free ADR. An offshore site is outside all of it, and the Commission's own warning notice from 20 January 2025 noted that unlicensed sites often target people who have self-excluded.

Recent Changes to Gambling Regulations

Two rules matter most. Since 19 January 2026, wagering requirements on bonus funds are capped at ten times and mixed-product promotions are banned. Financial Risk Assessments were announced on 7 July 2026 and will be phased in, starting with the largest operators at £5,000 net deposits in a rolling 24 hours for customers aged 25 and over and £2,500 for under-25s.

New online gambling sites UK — why do so many show a Curaçao licence?

Because a Curaçao licence is what the market sells. Direct licensing by the Curaçao Gaming Authority replaced the master-licence model from 24 December 2024, with a one-off €4,592 application fee and €47,450 a year thereafter. Older, cheaper orange sub-licences ended on 15 October 2025, so a site still displaying one is displaying a document the authority has explicitly said not to rely on.

How quickly should a withdrawal arrive from a licensed operator?

Nothing in the Licence Conditions and Codes of Practice sets a deadline. The evidence sits elsewhere: 96.3 per cent of 44.2 million withdrawals by customers of large online operators between June and September 2024 cleared automatically, 3.5 per cent within 24 hours and 0.1 per cent within 48 hours. Where an operator has no regulatory concerns about a customer, the Commission's view is that there is no valid reason to delay payment.

Does GamStop cover offshore casinos?

No. GamStop Online blocks accounts with operators licensed in Great Britain and can only exclude from participating operators; offshore sites holding no Commission licence are not connected to it. A registration runs for its full chosen term — six months, one year, five years or five years with auto-renewal — and then remains in place until the person contacts GamStop to remove it. Nothing offshore changes that.

What can be done if an offshore site refuses to pay?

Less than most people expect. The Commission is a regulator, not an ombudsman: it cannot resolve individual complaints or recover money, though it records every complaint and refers disputes onwards. Anjouan requires licensees to name an approved ADR provider in player terms; Kahnawà:ke employs a Dispute Resolution Officer. Where the site names no dispute route, the realistic options are bank or card chargeback routes and, where the sums justify it, legal advice.

New Gambling Sites UK Regulatory Requirements

A new gambling site is not a new problem — it is an old one in a new domain, and the licence at the bottom of the page answers nearly every question worth asking. The Commission's Illegal Markets team has issued 3,140 cease and desist and disruption notices since April 2024 and referred 447,778 search engine URLs, yet in the twelve months to March 2026 it commenced a single prosecution.