Mobile Casino Not on GamStop Pay by Mobile and Who Decides When It Goes Wrong

A mobile casino not on GamStop is an offshore operator holding no Gambling Commission licence. It can take deposits from a phone bill or an e-wallet, but British self-exclusion, British curbs on bonus terms and the British complaints route do not reach it. If a dispute arises, the decision is made abroad.

It is often typed "gamestop", which is a spelling slip and not a different scheme. GamStop is the national online self-exclusion register. Established in June 2017 by the Remote Gambling Association at the request of what was then the Department for Digital, Culture, Media and Sport, and live since 27 April 2018, it is free to use and holds the names of people who have asked British-licensed gambling companies to shut them out. Under licence condition 3.5.5 of the Gambling Commission's Licence Conditions and Codes of Practice, every operator holding a British licence must be part of it. An operator without that licence is not.

That single missing licence changes more than the sign-up bonus. This page looks at pay-by-mobile deposits on phones — what actually settles, what a phone bill cannot be made to do, what the overseas paperwork says about age limits and proof of identity, and above all where a complaint goes and who decides it. That last question is the one the trade prefers not to be asked, because the answer is usually a small office in a jurisdiction with no obligation to anyone in Britain.

What a Pay by Mobile Casino Outside GamStop Actually Is

Pay by mobile casino not on GamStop is the phrase players use for a site that lets a phone pay for chips and holds its licence somewhere else — Curaçao, Anjouan, Kahnawake, Malta, or nowhere at all. Reading it strictly: it is a casino, it is reachable on a handset, it takes money through a mobile payment channel, and it is not one of the operators tied into the British self-exclusion scheme.

The legal position is plainer than the marketing. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and it is immaterial whether those facilities are provided wholly or partly by remote communication, and whether they are provided inside or outside the United Kingdom. The Act was amended by SI 2014/264, in force from 29 September 2014, so that the offence bites where at least one piece of remote gambling equipment is in Great Britain, or where the operator knows or should know the facilities are likely to be used here.

That matters because it puts the offence on the operator, not on the customer. There is no adult offence in the Act for placing a bet with an unlicensed site. Section 47 makes it an offence to invite, cause or permit a child or young person to gamble; section 330 makes knowingly advertising unlawful gambling an offence. The Act's teeth point at suppliers and advertisers.

The Commission's own wording, published 21 October 2024, is that it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence, "including where the operator holds a licence in another jurisdiction". And offshore sites are not connected to GamStop: the obligation to participate applies only to British-licensed operators. That last point is flagged [unconfirmed] in the fact sheet because it is stated by trade sources rather than a regulator page — though GamStop's own terms of use, which describe a scheme covering participating operators only, say the same thing.

One more correction before we go further. Self-exclusion holds for its full chosen term, and it stays in place after that term ends until the person contacts GamStop to have it removed. A five-year exclusion set with auto-renewal can continue for up to four further five-year periods. Nobody at an offshore casino can shorten that, and nothing about it is soft.

Mobile casinos not on GamStop and what the licence tag does and does not carry

Mobile casinos not on GamStop come in three roughly distinguishable grades, and the grade says a lot about the paperwork that will be asked for and about where a complaint lands.

Regulated offshore licences — Curaçao, Anjouan, Kahnawake, Malta

These are real licensing regimes with real paperwork. Curaçao has run the National Ordinance on Games of Chance since 24 December 2024, with the Curaçao Gaming Authority as direct licensor. The old master-licence model is finished: Gaming Curaçao stopped licensing on 18 August 2024, Curaçao eGaming on 1 October 2024, Antillephone on 1 November 2024 and Curaçao Interactive Licensing on 31 January 2025. The legacy "orange" sub-licence certificates ended on 15 October 2025. A historic /JAZ number is not proof of anything current.

Anjouan licenses internet gaming under legislation adopted in 2005, issuing B2C and B2B licences at EUR 17,828 for issuance and the same for annual renewal, with the Anjouan Offshore Financial Authority named as the competent authority. Whether that authority is recognised is contested: an ABC News investigation published 31 December 2025 reported that a former attorney-general of the Comoros called the licensing entity "an illegal entity", while Anjouan Gaming says a 19 September 2024 legal opinion reconfirmed in February 2026 supports its validity — a claim from the licensee's own side, and [unconfirmed].

Kahnawà:ke has regulated interactive gaming since 8 July 1999 and issues one Interactive Gaming Licence plus Client Provider Authorizations and Key Person Licences. Malta's Gaming Authority charges a one-time EUR 5,000 application fee, a EUR 25,000 fixed annual licence fee and 5 per cent gaming tax, and requires EUR 100,000 paid-up capital for Type 1 and Type 2 licences. Malta also publishes a list of Unauthorised URLs declaring any reference to a Maltese licence on those domains false and misleading.

Sellers of a "data processing licence" — Costa Rica

Costa Rica has no comprehensive gambling licensing regime and no formal framework for issuing gambling licences. The "data processing licence" spoken of in the industry is not a licence in the strict legal sense. Its Legislative Assembly rejected Bill No. 25,057 in early 2026, a bill that would have introduced one. Games of chance are generally prohibited there under domestic law. When a support agent says "we are licensed in Costa Rica", the honest translation is: not licensed for gambling.

No licence at all

Some sites quote a licence number from a register that has never heard of them. An aggregator reading Curaçao's public register at 03:30 UTC on 6 November 2026 counted 704 licences held by 698 operators, of which 552 were active — a third-party tally, not a CGA publication, and [unconfirmed], but useful as an order of magnitude. The Curaçao Gaming Authority said on 7 October 2026 that its public verification portal would not return to service and that it is building an alternative way of checking licensed domains, because the digital seal may be affected by the transition.

Paying a mobile casino with your phone bill — and what a phone bill cannot do

A pay by mobile phone bill casino not on GamStop takes the charge onto a monthly mobile invoice or a prepaid balance through carrier billing. The mechanics are unremarkable and the consumer protection is thin, for one structural reason: a phone bill is not a payment account. The Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 define what counts as regulated payment activity, and carrier billing sits outside the payment services perimeter. Licence condition 5.1.2, effective 31 January 2024, requires a British licensee to accept payment from Great Britain customers only by a method whose provider is a payment service provider under the Payment Services Regulations 2017 — a rule that exists to keep exactly this kind of debit off regulated casino accounts.

The combination is the problem. Carrier billing lets money leave a household without a card, a statement line the account holder recognises, or a bank block. The Gambling Commission's list of banks offering a gambling blocking service, last updated 16 October 2026, names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling. Those blocks work by declining merchants categorised under gambling Merchant Category Codes, are applied at card level so must be set on each card, and mostly carry a 48-hour or 72-hour cooling-off before gambling transactions are allowed again. None of that touches a carrier-billed transaction. Ask a bank block to stop a phone bill and it will not answer; ask the mobile network and you are dealing with a company that has bought a debt from a casino it has never met.

The cash-out direction is worse than the cash-in direction, and consistently so. A withdrawal cannot go back onto a phone bill. It has to go somewhere the operator can push money — a bank transfer, a wallet, or crypto — and that is where the identity paperwork appears, the speed disappears, and the terms that the operator wrote for itself start doing the work.

Where a complaint goes, and who decides it

This is the site's angle on all of it: the licence is not a badge, it is a routing table. The licence decides who will hear a complaint after the operator says no.

On a British-licensed site the route is fixed by rule. Social responsibility code provision 6.1.1 of the LCCP requires licensees to have arrangements for customers to refer any dispute to an approved alternative dispute resolution provider free of charge if the operator has not resolved it within eight weeks. Operators may use only providers approved by the Commission: ADR Group, Pegasus ADR Service, Blexr, the Centre for Effective Dispute Resolution, eCOGRA, IBAS, ProMediate and the Tattersalls Committee. IBAS and eCOGRA are the ones that do most of the work. Both report compliance: IBAS recorded 3,721 domestic disputes for 1 October 2024 to 30 September 2025, an average domestic completion time of 20 days, and 100 per cent operator compliance with decisions in the consumer's favour in both 2023-24 and 2024-25. eCOGRA's report for 1 October 2024 to 30 September 2025 shows 911 disputes received, average domestic resolution 31 days, and 17.8 per cent of completed disputes decided for the consumer.

Two details matter more than the totals. First, 361 of 499 invalid eCOGRA disputes — 72.3 per cent — had not been through the operator's own complaints procedure first, so the queue is full of people who skipped a step. Second, the clock only starts once the customer has actually complained to the operator.

Offshore, there is no such machinery. Anjouan requires licensees to appoint an approved ADR provider and name it in player-facing terms, with complaints expected to be resolved internally within 30 days before escalation; the current approved list is EGIS ADR, Axion ADR, iGaming ADR and a private adjudicator. Kahnawà:ke employs a full-time Dispute Resolution Officer. Malta's Gaming Authority asks players to lodge complaints through a form it reviews in English or Maltese, and recommends trying the operator first. Curaçao's position is weaker still, and its verification portal has been offline since 7 October 2026.

An offshore ADR finding is worth exactly what the operator decides it is worth, because the body that appointed it is not the body that licensed the site. There is no regulator behind the ruling with a licence to threaten. And a British regulator cannot help: the Commission is a regulator and not an ombudsman, cannot resolve individual complaints and cannot get anyone their money back. It records what it is told and refers disputes to a third party. The Commission's remit covers only websites that trade or advertise to customers in Great Britain and hold a British licence.

The comparison, by where the licence sits

The one thing this turns on regarding proving who you are

Identity verification is where the money actually gets stuck, and the offshore version works differently from the British one in a way worth understanding before any card is entered.

The first time, on a British site, is meant to be front-loaded. Licence condition 17, introduced on 7 May 2019, requires the licensee to obtain and verify information establishing identity before the customer is permitted to gamble, and that information must include name, address and date of birth. The Commission expects checks brought forward to before a deposit, and says in a blog posted 12 August 2026 that onboarding on an incomplete or inaccurate file — initials instead of full names, nicknames, commercial addresses in place of residential ones — is not sufficient. It also warns about "fuzzy matching" through third-party verification providers, and notes a nastier consequence: onboarding a customer under a middle name rather than a forename can create a mismatch with GamStop's records, which quietly drains the value of a self-exclusion.

A remote casino may take the hybrid approach — identify the customer and check age at registration, but defer full verification until the €2,000 threshold in the 2017 Regulations is triggered, counting a single transaction or linked ones. Later on, the file is maintained. Customer due diligence is ongoing and may need updating when circumstances change; source of funds enters the picture for higher-risk accounts; and a withdrawal request must not generate a demand for extra information the licensee could reasonably have asked for earlier, under licence condition 17.1.1 — unless another legal obligation, anti-money-laundering law being the obvious one, requires it at that moment.

Offshore, the order is often reversed. Registration costs nothing and asks for an email address; verification arrives at the withdrawal screen, when the balance has grown large enough to matter to the operator. Anjouan's published standards do require segregated player funds, RNG certification by an approved independent testing facility, and AML controls with age verification. Whether a given operator does any of it is another question, and the answer surfaces at the worst possible moment.

The warning signs are specific. A site that asks for full documents only at withdrawal. A site that treats a failed ID check as grounds for keeping a balance — which is the opposite of the British position, where operators cannot confiscate funds because identity has not been provided, and the Competition and Markets Authority's principles to that effect apply to all online gambling operators. A site whose terms give it sole discretion to void winnings. And a site whose support staff cannot say, in a single sentence, which body will decide a dispute they lose.

Five signs a Pay by Mobile Casino Can Be Trusted

Offshore is a spectrum, not a bin. A handful of operators sit near the British standard and a great many do not. These five checks separate them, and each one takes under five minutes.

The licence verifies against the register, not the footer image

Copy the licence number and the domain from the site and check them against the regulator's own register. On a Curaçao seal, clicking it must redirect to cert.cga.cw; if the design, colour or format differs, the site is not authorised. If the certificate behind the seal names a different domain from the one being browsed, the operator is displaying someone else's certificate. Anjouan certificates carry a unique licence number and a QR code linking to a public register, and Anjouan says a certificate that cannot be verified there should not be relied on. Quick check: does the seal lead to the regulator, or to a pretty picture?

The terms name a dispute body and a time limit

Not "our support team will be happy to help". A named ADR provider, with contact details, in the terms a player actually reads. Anjouan requires this of its licensees, and Kahnawà:ke's Dispute Resolution Officer is a real post with a real name behind it. Quick check: search the terms for a regulator's initials and see whether anything other than a support email comes back.

Withdrawals are not unlocked by wagering a deposit

A rule that wagering requirements attach only to the bonus, and never to a player's own money, means the deposit balance can always be cashed out. British guidance goes further and requires that wagering requirements must not apply to play with the deposit balance, that deposit and bonus balances are displayed separately, and that players may withdraw the deposit balance at any time, bonus pending or not. An operator whose terms define playthrough as a multiple of bonus plus deposit is doing the arithmetic a different way. Quick check: read the sentence that defines the wagering base.

Self-exclusion is honoured even though it is not required

A good offshore operator will take a self-exclusion instruction voluntarily, refuse to reverse it on request, and keep the account shut until the stated date. Kahnawà:ke goes furthest, treating voluntary self-exclusion as permanent and irrevocable, and forfeiting funds deposited in breach of it to a charity chosen by the Commission. The bad ones reopen the account as soon as the player asks, which tells you the exclusion was a courtesy rather than a term. Quick check: send the request by email and see how long it takes to be confirmed in writing.

Payment methods, limits and fees are declared before the first deposit

Card, bank transfer, e-wallet and crypto each behave differently: fees, floors, caps and clearing times all vary, and the operator knows them before the player does. The Gambling Commission's research on trust published 23 July 2026 found 49 per cent of people who had gambled in the past 12 months agreeing it is quick and easy to withdraw winnings, 33 per cent neutral and 18 per cent disagreeing — so a site that spells out the timetable in advance is describing something a fair number of players do not believe they got elsewhere. Quick check: find the withdrawal page before signing up, not after.

A Practical Check Before Depositing by Phone

Six steps, in order, each with a reason.

1. Confirm the licence against the regulator's own register. Write down the licence number and the exact domain first, then go to the regulator and compare. A number copied from a footer and never checked tells you nothing; a number absent from the register tells you a great deal.
2. Read the withdrawal terms before the bonus terms. The clawback lives in the withdrawal clause — maximum cashout limits, the ban on requesting a second withdrawal until the first is authorised, manual review of every fifth withdrawal. The Commission reached a £900,000 regulatory settlement with a major remote operator on 21 October 2026 over, among other things, exactly those two practices, and the second one is a habit that does not stay onshore.
3. Find out whether the phone payment is carrier billing or a wallet. If the charge lands on a mobile invoice, no bank-side gambling block will stop it, no card statement line will identify the merchant clearly, and no chargeback route exists in the usual sense. Knowing which pipe the money is in determines what can be done afterwards.
4. Test the complaints route with a small question before depositing a large amount. Send one email asking who the ADR provider is and what the deadline is. You learn whether a human replies, how fast, and whether the answer names an entity or a shrug.
5. Install blocking software as well, and tell the truth about what it does. GamStop signposts Gamban and BetBlocker for phones, tablets and computers. BetBlocker states it blocks over 1,368,000 gambling websites and 3,100 apps, needs no registration and is free worldwide. Gamban blocks licensed and unlicensed sites and is designed to be hard to remove; its free UK licence scheme, TalkBanStop, ended on 31 March 2026, and Gamban is free in Wales but costs £4.99 a month or £29.99 a year in England and Scotland after a 7-day trial. Neither is a regulator. Both add friction.
6. Note the help routes now; you will not want to look them up later. The National Gambling Helpline, run by GamCare, is free on 0808 8020 133, 24 hours a day, every day of the year, through phone, live chat and WhatsApp. In Wales the number given is 0808 2819 265. GamCare is not a crisis line and cannot transfer anyone in immediate danger. Gamblers Anonymous runs around 250 meeting locations across England, Wales and Northern Ireland on 0330 094 0322. Gam-Anon supports families who are affected whether or not the gambler attends anything. GamFam is a registered charity delivering its GRA5P five-stage peer-support programme for affected families. Citizens Advice gives free, confidential advice including on gambling-linked debt, and Citizens Advice Scotland runs a gambling support line on 0800 328 1131, Monday to Friday, 10am to 3pm.

The Numbers on the Table

The scale of the unlicensed market is disputed, which is itself a fact worth holding on to. H2 Gambling Capital estimated the amount staked with illegal operators in the UK reached £16.6 billion in 2025, up from about £5 billion in 2019, with the proportion of gambling happening legally falling from 97 per cent to 92 per cent — a market-intelligence figure, published 12 May 2026. The Betting and Gaming Council's commissioned Frontier Economics study conservatively put £2.7 billion of annual online black-market stakes in September 2024, equal to 2.1 per cent of the £128 billion staked with regulated remote casino, betting and bingo operators, involving 1.5 million Brits. Analysis by Yield Sec for the Campaign for Fairer Gambling released in June 2026 put the GB online market at £8.8 billion GGR in 2025, split 91 per cent regulated and 9 per cent unregulated. The Gambling Commission's own October 2024 methodology uses web-traffic data with a licensed-play assumption of £0.32 GGY per minute for online slots and explicitly notes it does not capture activity hidden by VPNs.

The three estimates describe the same thing at magnitudes an order of magnitude apart, and the difference is mostly methodology and who paid for it. The Commission's consumer survey, published 5 November 2026 over data from April 2025 to April 2026, puts the more modest figure: 0.6 per cent of respondents had engaged with illegal gambling websites in the past four weeks and a further 0.4 per cent in the past 12 months, while 94.4 per cent showed no indication. Among people who had gambled online in the past four weeks, 2.5 per cent had engaged with an illegal site and another 1.5 per cent within the past year.

For enforcement, the Commission's Illegal Markets team reported on 21 October 2025 that since April 2024 it had issued 3,140 cease and desist and disruption notices, referred 447,778 Bing and Google URLs and secured 287,961 removals. Measured across 160 illegal websites, engagement fell an average of 32 per cent after disruption. By method the spread is wide: registrar blocks and suspensions produced the largest average fall at 91 per cent each, ahead of GEO IP blocking at 60 per cent, Bing removal at 52 per cent, Google removal at 30 per cent and Facebook removal at 8 per cent. That is a polite way of saying search-engine delisting does not work very well, and the Commission says so itself. Across its quarterly reports for April 2025 to March 2026, every quarter recorded 0 or 1 prosecutions commenced.

The national picture sits behind all of it. Total Great Britain Gross Gambling Yield was £17.5 billion in the year to March 2026, up 4.4 per cent, with the remote casino, betting and bingo sector at £8.3 billion, up 6.9 per cent. Remote casino gross gambling yield was £5.0 billion for April 2024 to March 2025, of which £4.2 billion came from slots, and the Commission's 2026 risk assessment, published 30 July 2026, rates the sector high risk for money laundering, unchanged.

The Bonus Arithmetic That Changes Abroad

Wagering requirements are the cleanest measure of how much the same offer changes when it crosses a border. On 19 January 2026 the Commission's new rules came into force. Social responsibility code 5.1.1 caps wagering requirements — a requirement to wager a total value before bonus funds become withdrawable — at a maximum of ten times. The Commission chose the cap over an outright ban partly because, as it put it when announcing the rule on 26 March 2025, the limit "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements". The same code bans mixed-product promotions requiring two or more types of gambling, so "bet £5 and get £10 free bet" is compliant while "bet £5 to get 20 free spins" is not.

Offshore, the cap does not exist. Ignition Casino states that casino bonus amounts carry a 25× wagering requirement, may express it against the bonus alone or bonus plus deposit, and publishes a contribution chart where slots count 100 per cent, table games 20 per cent, video poker and blackjack 10 per cent, roulette and baccarat 5 per cent, and craps, Hot Drop Jackpots and live dealer games 0 per cent. BlueChip Casino states that the deposit amount itself is not included in the wagering calculation for deposit bonuses, and separately reserves the right to limit what is withdrawable from bonus winnings to 300 per cent of the credited bonus amount, voiding the excess. That second clause has no British equivalent: in the UK the Commission's fair-terms guidance prohibits any maximum limit on what a consumer may withdraw from their deposit balance.

Ranges quoted by trade sources put offshore welcome offers at 35× to 50× and no-deposit bonuses at 40× to 60× with a €50 to €100 cashout cap — [unconfirmed] figures from comparison tables rather than operator documents, but consistent with the terms the operators themselves publish. Offshore maximum-bet rules are another trap: BlueChip caps bets while wagering at €5 for regular players and €10 for VIP players and rejects anything above; Ignition sets the casino maximum bet per wager at 20 per cent of the deposited amount and warns that breaching it may mean account closure, forfeiture of the bonus and forfeiture of winnings generated during wagering.

For contrast on how slowly onshore practice moves, the Competition and Markets Authority opened its investigation into online gambling on 21 October 2016 and closed it on 29 April 2019 with written undertakings from six operators — Ladbrokes, William Hill, PT Entertainment, BGO, Jumpman Gaming and Progress Play. Those undertakings, published 29 August 2018, included agreeing not to impose maximum limits on withdrawals. Eight years later, a regulator was still extracting £900,000 from a remote operator over withdrawal terms. Consumer law has moved on without the casinos: the unfair commercial practices provisions of the Digital Markets, Competition and Consumers Act 2024 came into force on 6 April 2025.

Where the Money Could Go Wrong

Carrier billing and crypto are the two payment routes where a pay by mobile casino not on GamStop can genuinely move money around a bank block, and both need describing honestly.

Bitcoin's protocol targets an average of ten minutes between blocks, and a block is not guaranteed within that window: the probability of one arriving in any ten-minute period is about 63 per cent, rising to 95 per cent within 30 minutes and 99.7 per cent within 60. The classic client shows a transaction as unconfirmed until six blocks deep, and most merchants bearing double-spend risk wait for six or more, which assumes an attacker with under 10 per cent of network hashrate and accepts less than a 0.1 per cent residual risk. Litecoin targets 2.5-minute blocks, giving roughly 15 minutes for six confirmations — but only about 55.43 per cent of modelled six-confirmation spans actually complete within 15 minutes.

Ethereum fees are paid whether a transaction succeeds or fails, with a standard transfer costing exactly 21,000 units of gas, gas priced in gwei, and the base fee burned rather than paid to a validator. Live pricing on 3 November 2026 put a 21,000-gas transfer at roughly $0.005 to $0.009 and a 55,000-gas ERC-20 transfer at roughly $0.012 to $0.023 — cheap, provided nothing goes wrong. On TRON, where USDT settles as TRC-20, every account receives 600 free Bandwidth replenishing over 24 hours, but Energy has no free quota: a USDT transfer to a wallet already holding USDT consumes about 65,000 Energy, roughly 13 TRX burned without staked Energy, and about double that to a brand-new wallet. TRON's dynamic Energy mechanism can multiply the effective cost up to 4.4× on heavily-used contracts.

The wallet layer is where the money is price-sensitive. Skrill charges 2.80 per cent of the amount withdrawn with a minimum of EUR 3.50 for transfers to a bank account, and EUR 5.00 monthly if the account is unused for six months. Neteller charges 2.80 per cent or a minimum of USD 3.50 for bank transfers, 12.75 USD for a member wire, 3.49 per cent to Skrill and 0 to 7.5 per cent to Visa or Mastercard. PayPal charges nothing to withdraw a personal UK balance to a bank account where no currency conversion is involved, and 0.50 GBP if a withdrawal fails on wrong details.

Bank-side, the Faster Payments ceiling is £1 million per transaction, raised from £250,000 on 10 February 2022, with over 90 per cent of payments completing in under two seconds — though the ceiling is a scheme limit and individual banks set lower ones. Visa Direct's Fast Funds service promises funds within 30 minutes of approval. Faster Payments limits apply per transaction rather than per day, which is the loophole that makes tiered withdrawal terms worth reading twice.

The Dated Part and What the Registers Actually Say Now

Read a licence claim off the date on the page. From 31 October 2025 every gambling business must prompt customers to set a financial limit before their first deposit, offer financial limits through a free-text box, and remind customers every six months to review their account information. Financial vulnerability checks have been a licensing requirement on remote businesses since August 2024, initially at £500 net deposits over a rolling 30 days, cut to £150 from 28 February 2025. Financial Risk Assessments were announced on 7 July 2026 to arrive in stages, starting at £5,000 net deposits in a rolling 24 hours for customers aged 25 and over and £2,500 for under-25s, ending with thresholds of £1,000 in 24 hours or £3,000 in 90 days for the over-25s. The Commission confirmed that in the early stages it will take no enforcement action for failing to act after a Financial Risk Assessment.

The credit card ban has been in force since 14 April 2020, and operators must also check that money arriving by e-wallet was not loaded from a credit card. Online slots carry a £5 maximum stake per game cycle since 9 April 2025, and £2 for adults aged 18 to 24 since 21 May 2025. A statutory levy commenced on 6 April 2025 at 1.1 per cent of previous-year gross gambling yield for online operators, raising just under £120 million in its first year and ringfenced for research, prevention and treatment — split 20 per cent research, 30 per cent prevention and 50 per cent treatment, with NHS England taking commissioning responsibility for gambling-harms treatment in England from 1 April 2026.

None of it applies offshore. That is the whole trade: the operator keeps the deposit mechanism, the margin and the customer, and hands the compliance cost, the complaints queue and the tax to someone else. GamStop registrations account for a rising share of the excluded population — 117,756 new registrations during 2025 and 561,983 active exclusions at the end of that year, 614,738 on the register as of July 2026, of whom more than one in two had chosen the maximum five-year term. With registrations up 16 per cent year-on-year in the first half of 2026 and under-25s making up nearly one in three, the pool of people a GamStop-blocked casino cannot touch has never been larger. That is the commercial reason this market exists, and no amount of mobile-friendly design changes it.

Frequently Asked Questions

Is a mobile casino not on GamStop legal to use?

The operator is breaking the law: section 33 of the Gambling Act 2005 makes providing gambling facilities without an operating licence an offence, and it is immaterial whether the facilities are provided inside or outside the United Kingdom. The Commission states plainly that offering commercial gambling services to consumers in Great Britain without a Commission licence is illegal, including where the operator holds a licence elsewhere. No equivalent offence attaches to the adult customer.

Can a pay by mobile casino really bill my phone?

Where the mobile network permits carrier billing, yes — the charge is added to a monthly invoice or taken from prepaid credit. The catch is that a phone bill is not a payment account, so the Money Laundering Regulations' payment services perimeter does not cover it. Licence condition 5.1.2, effective 31 January 2024, requires British licensees to accept payment only through a payment service provider under the Payment Services Regulations 2017, which is why this route is an offshore speciality.

Why was my withdrawal held until I sent documents?

Because verification was deferred to the withdrawal screen rather than done at onboarding. On a British-licensed site, licence condition 17 requires identity to be established before the customer is permitted to gamble, and condition 17.1.1 forbids demanding information at withdrawal that could reasonably have been requested earlier — over a quarter of complaints reaching the Commission's Contact Centre concern identity verification for exactly that reason, as its blog of 12 August 2026 records. Offshore, there is no such rule.

What is the maximum wagering requirement I should accept?

Ten times is the British ceiling, set in social responsibility code 5.1.1 and in force since 19 January 2026, replacing a market where the Commission said some licensees applied up to 60 times. Offshore there is no cap: published terms put welcome offers at 25× to 50×, and trade comparisons describe no-deposit bonuses at 40× to 60× with cashout caps of €50 to €100. The other question is what the multiple is applied to — bonus alone, or bonus plus deposit.

Where can I complain if an offshore casino will not pay?

Nowhere with a licence to threaten it. Anjouan licensees must name an approved ADR provider with contact details in their terms, with internal resolution expected within 30 days before escalation. Kahnawà:ke employs a full-time Dispute Resolution Officer. Malta reviews complaint forms in English or Maltese. Curaçao's public verification portal went offline on 7 October 2026. The Gambling Commission cannot help either way: it is a regulator, not an ombudsman, and cannot recover money for individuals.

Does self-exclusion still apply if the casino is not on GamStop?

No, and this is the point rather than a footnote. GamStop's obligations fall on operators licensed in Great Britain, and its terms describe a scheme covering participating operators only. Self-exclusion set through GamStop holds for its full chosen term and then remains in place until the person contacts GamStop to remove it, with five-year terms renewable for up to four further periods — so an offshore account opened in the meantime leaves the register intact and simply runs alongside it, with none of the protections.

Can a bank block stop a mobile casino deposit?

Sometimes, not often, and it depends entirely on where the charge goes. A gambling block declines payments to merchants categorised under gambling Merchant Category Codes, and the Commission's list of banks offering one, last updated 16 October 2026, names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling. Blocks apply at card level, must be activated on each card, and mostly carry a 48-hour or 72-hour cooling-off before gambling transactions resume.

Who Gets to Decide

The difference between a licensed British casino and a mobile casino not on GamStop is not the games, the mobile design or the size of the welcome offer; it is that one of them has a named third party obliged to rule on a complaint, and the other has a support inbox in a jurisdiction that has never heard of you. Everything else — the ten-times wagering cap since 19 January 2026, the withdrawal demands that licence condition 17.1.1 was written to stop, the £1 million Faster Payments ceiling that means nothing if the withdrawal is never authorised — is downstream of that one fact. My view, after years of reading terms that were written to be read quickly: if you cannot find out who decides a complaint before you deposit, you have already found the answer.

The National Gambling Helpline is free on 0808 8020 133, 24 hours a day, every day of the year, and in Wales on 0808 2819 265. And when you next hear that an offshore operator could not possibly be unlicensed, remember the number its own trade body quotes: 552 active Curaçao licences among 698 operators — leaving a good many names on that register that are not on it at all. Page dated 13.11.2026.