Online casinos not on GamStop hold no Gambling Commission licence, so they sit outside British self-exclusion checks and UK consumer protections. A self-exclusion still runs its full term and stays until GamStop is contacted to remove it. An offshore dispute goes to the operator, then usually to an overseas regulator or its approved adjudicator — not to a British body.
There are three things people want to know about online casinos not on GamStop, and they are not the same question. The first is where the sites are. The second is whether they pay. The third — the one that actually decides whether the other two matter — is who has to listen when something goes wrong.
I have watched the trade talk about this for years, and I have watched the paperwork. The scheme itself is a small charity-run database in Harrogate. It is often typed "gamestop", which is the spelling you see in search bars and, occasionally, in headlines. The formal thing is GamStop. What it does is narrow: it blocks you from gambling with companies licensed in Great Britain. That is the whole trick, and it is also the whole trap. Because a site need not be licensed in Great Britain to take a bet placed from a British sofa.
Since 31 March 2020, every operator holding a Commission licence has had to be part of the scheme, and since April 2020 they have had to re-check their entire customer base at least every 24 hours. Offshore operators are not part of that loop at all. No register lookup, no automatic block, no return of funds held in an account. So the first honest sentence about this market is not about choice. It is about where the boundary sits, and who is standing on the other side of it.
Table of Contents13
- Where the UK Line Actually Falls
- The 2026 Rules That Push People Offshore
- Who Referees a Complaint
- Five Signs an Offshore Operator Is Worth the Risk
- How to Judge One of These Sites in Practice
- What the Numbers Say About Getting Paid
- The Bonus Terms That Do the Damage
- The Regulators Behind the Licences
- Checking the Operator Before the First Deposit
- Self-Exclusion, Stated Plainly
- Where to Get Help
- Common Questions About Offshore Casinos
- The Short Answer About the Shortcut
Where the UK Line Actually Falls
The Gambling Commission's position is not ambiguous. It says it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a licence from the Commission, and it says that applies even where the operator holds a licence somewhere else. The offence sits in section 33 of the Gambling Act 2005, and on summary conviction it carries up to 51 weeks' imprisonment, a fine at level 5, or both.
Read the detail and a strange thing appears. The Act bites hardest on the operator, not the punter. Its general gambling offences attach to those who provide facilities. That is cold comfort for anyone whose money is sitting in an unlicensed account, and no comfort at all for the person who wants a British regulator to intervene on their behalf, because the regulator's remit only runs to sites that must hold a British licence in the first place.
The Commission treats this as an economy of attrition rather than a courtroom. Since April 2024 its Illegal Markets team issued 3,140 cease and desist and disruption notices — 2,032 cease and desist notices, 774 registrar referrals, 402 host referrals and three payment provider referrals — and referred 447,778 search URLs. A further 366 websites were referred to search engines in April to June 2026, rising to 1,835 in July to September 2026, alongside 546 cease and desist notices.
That last jump tells its own story. The market being chased is not shrinking politely. Over May 2024 to July 2025, just over 1,000 unique illegal gambling websites were accessed by consumers in Great Britain. H2 Gambling Capital put stakes with illegal operators at £16.6 billion in 2025, up from about £5 billion in 2019. Those are estimates and I would not treat any of them as gospel — the Commission's own method doesn't even count activity hidden behind a VPN. But the direction of travel is not in dispute.
The 2026 Rules That Push People Offshore
The Current Market Landscape
UK online casinos not on GamStop and the sites in the frame
How Licences Work in the Current Market
Those cluster phrases describe one market, not three, and in 2026 that market is shaped by regulation rather than by marketing. The Commission's own data gives a rough sense of what people are leaving: online slots Gross Gambling Yield rose 12 per cent year-on-year to £773 million in the quarter to March 2026, on 25.1 billion spins. Total online GGY for that quarter was £1.55 billion, up 7 per cent.
So the money is not walking away in droves. The Commission's November 2026 analysis estimates that among people who had gambled online in the last four weeks, 2.5 per cent had engaged with an illegal gambling website, with another 1.5 per cent in the past year. That is a small minority and a large number of people.
What drives the search, as far as I can tell, is friction. Since 9 April 2025 adult slot players have faced a £5 maximum stake per game cycle, with £2 for 18- to 24-year-olds from 21 May 2025. Since 31 October 2025 every operator must prompt a customer to set a financial limit before their first deposit. Financial vulnerability checks run at £150 net deposits over 30 days since 28 February 2025. Financial Risk Assessments are being introduced in stages from July 2026. And since 19 January 2026 wagering requirements on bonus funds are capped at ten times, with mixed-product promotions banned outright.
This is where I part company with the affiliate copy. Those rules are described offshore as bureaucratic obstruction. I think they are the most defensible thing the Commission has done in a decade, and the ten-times cap in particular is a limit on a practice that ran to 60 times. An offshore site advertising uncapped bonuses is not offering freedom. It is offering the terms that British rules were written to stop, and calling that a feature.
Who Referees a Complaint
Here is the one thing this whole subject turns on, and it is not the licence number in the footer. It is jurisdiction over a dispute.
On a British-licensed site, the path is fixed. Under the Licence Conditions and Codes of Practice, if a complaint is not resolved to the customer's satisfaction within eight weeks, the licensee must have arrangements for referring it to an approved Alternative Dispute Resolution provider, free of charge. The approved list is short: ADR Group, Pegasus ADR Service, Blexr, CEDR, eCOGRA, IBAS, ProMediate and Tattersalls Committee. IBAS and eCOGRA have historically handled the majority of gambling disputes. The Commission itself is a regulator, not an ombudsman, and cannot get anyone's money back.
Offshore, the referee changes. Curaçao's LOK regime took effect on 24 December 2024, replacing master licences and sub-licences with direct supervision by the Curaçao Gaming Authority. Legacy "orange" certificates ended on 15 October 2025. The old master licensors stopped issuing on set dates: Gaming Curaçao on 18 August 2024, Curaçao eGaming on 1 October 2024, Antillephone on 1 November 2024, Curaçao Interactive Licensing on 31 January 2025. A /JAZ number in a footer is not proof of anything current.
Anjouan requires its licensees to name an approved ADR provider in player terms and to resolve complaints within 30 days before escalation; the approved providers are EGIS ADR, Axion ADR, iGaming ADR and a licensee. Kahnawà:ke employs a full-time Dispute Resolution Officer. These are real processes. They are simply not British processes, they do not apply British consumer law, and an award in your favour depends on an operator that chose that regulator in the first place honouring it.
The warning signs are consistent. A complaint route that is an email address and nothing else. A licence seal that does not match the domain in front of you — Curaçao's Certificate of Operation seal must redirect to cert.cga.cw, and a certificate showing another operator's domain is unauthorised by its own terms. A regulator whose own website you cannot find in a minute.
Five Signs an Offshore Operator Is Worth the Risk
None of these are a guarantee. They are the difference between a business with something to lose and a shell with nothing.
A Verifiable Licence, Not a Picture of One
Check the regulator's own register, not the site's badge. Curaçao's Certificate of Operation is domain-specific and must redirect to cert.cga.cw; if the seal differs in design or colour, or the certificate names a different domain, walk away. Anjouan certificates carry a unique licence number and a QR code linking to its public register, and its own policy says a certificate that cannot be verified there should not be relied on. Kahnawà:ke's Logo Certificate Program generates a Certificate of Good Standing when the Commission's logo is clicked.
A Complaint Route With a Name Attached
Look for a designated ADR provider named in the terms, with contact details — not "contact support". Anjouan requires exactly that. A British-licensed comparison point: the operator must let you go to an approved ADR provider free of charge after eight weeks.
Terms on Withdrawals You Can Read Before Depositing
Read the withdrawal clause before you deposit, not after you win. Look for a maximum cashout figure, a maximum bet while wagering, and a stated processing window. A UK-licensed operator may not impose any maximum limit on what can be withdrawn from a deposit balance, and may not confiscate funds for failing identity checks. Offshore terms routinely do both.
Segregated Funds and a Stated Rating
Ask what happens to your balance if the operator fails. UK licensees must publish a customer-funds protection rating — not protected, medium or high — and remind unprotected customers every six months. A reputable offshore regulator asks for something similar: Anjouan's standards require operators to segregate player funds from operational funds. A site that cannot answer the question has answered it.
A Self-Exclusion Policy That Means Something
Kahnawà:ke states that its voluntary self-exclusion is permanent and irrevocable, and that a player who breaches it forfeits deposited or won funds to a third-party charity. That is a real policy with teeth. Against that, the Commission warned in January 2025 that unlicensed sites often target customers who have self-excluded via GamStop. A site that markets itself as a way round an exclusion is advertising the one thing it cannot legally offer.
How to Judge One of These Sites in Practice
- Write down the licence number and search the regulator's register for it. Not the seal, not the badge image — the register. A number that returns nothing, or returns a different domain, ends the exercise.
- Read the withdrawal section of the terms before depositing. Look specifically for a maximum cashout, a maximum bet while a bonus is running, and any fee for processing. If the phrase "at our sole discretion" appears next to winnings, that is the answer.
- Put the advertised bonus through the cap test. Multiply the bonus by the wagering multiple and compare it with the maximum cashout. Where the cap is lower than the playthrough total, the bonus is not worth the deposits it will absorb.
- Find the regulator's complaint route and the named ADR provider. Confirm the provider is on the regulator's list, that it takes complaints in English and that it is free. If the only route is the operator's own support desk, there is no second opinion.
- Check the funds-protection position in writing. Segregated client accounts, or a stated insolvency rating. Keep the screenshot. It is the only document that will matter if the site stops answering.
- Set your own limits at the operator before you play, and treat country as the decision. A monthly deposit cap entered at setup is worth more than any review, and if the answer to steps one to five is unclear, the country of licensing should settle it.
What the Numbers Say About Getting Paid
Withdrawals are where the difference between a licensed and an unlicensed operation stops being theoretical. British-licensed operators have numbers behind them, and they are good. Commission data covering June to September 2024 records 44.2 million withdrawals by customers of large online operators: 96.3 per cent cleared automatically, 3.5 per cent within 24 hours and 0.1 per cent within 48 hours. Earlier data from some of the largest firms showed around 99 per cent of requests approved, processed and fulfilled within 24 to 48 hours.
Offshore sites have no equivalent disclosure obligation, and the numbers that exist about the topic are British ones about British problems. Problems with withdrawals are the single most common subject of complaints to the Commission's Contact Centre, which receives over 6,000 calls a year; by July 2024 it was still getting around 2,000 complaints a year about withdrawal delays. Over a quarter of the complaints that reach it concern identity verification, typically raised when documents are demanded only at the point of withdrawal. Complaints coded "Withdrawals and/or financial transactions" fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025 — better, and still the top category.
The comparison table below is by method, because method is what actually determines how long a payout takes — including on an offshore site, where the operator's own processing window is only half the story.
| Method | Typical operator-side processing | Chain or scheme time | Cost notes |
|---|---|---|---|
| Faster Payments | Instant to 24 hours | Over 90% of payments complete in under 2 seconds | Scheme ceiling is £1 million per transaction; individual banks set lower limits |
| Visa Direct | Instant to 24 hours | Funds available within 30 minutes of approval | Card withdrawal fees offshore commonly run 0–7.5% |
| Bitcoin | Instant to a few hours | 10-minute average block target; 6 confirmations is the classic merchant default | Fee paid on-chain, set by the sender |
| USDT on TRON | Instant to a few hours | Energy-based; no free Energy quota | Roughly 13 TRX burned for a standard transfer without staked Energy, around 26 TRX to a new wallet |
| Litecoin | Instant to a few hours | 2.5-minute average block target; about 15 minutes for 6 confirmations | Fee paid on-chain |
| Skrill | Up to 24 hours | Bank transfer withdrawal 2.80%, minimum EUR 3.50 | Service fee of EUR 5.00 a month if unused for 6 months |
| Neteller | Up to 24 hours | Bank transfer withdrawal 2.80%, minimum USD 3.50 | Member wire USD 12.75; 0–7.5% to Visa or Mastercard |
| MiFinity | Up to 24 hours | Crypto withdrawal 1.8%; €1 for Visa EEA | FX markup of up to 2.99%, or 3.99% on exotic pairs |
| PayPal | Up to 24 hours | Bank withdrawal free with no conversion | 3% on withdrawal to a US bank account; 0.50 GBP bank return fee if details fail |
Two warnings sit in that table. The first is that a chain time is a target, not a promise: Bitcoin's 10-minute average means a block arrives within any 10-minute window about 63 per cent of the time, 95 per cent within 30 minutes. Litecoin's 15-minute six-confirmation figure holds only about 55.43 per cent of the time. The second is that the UK has already legislated against the trick most likely to be used against a customer: reverse withdrawals were banned outright from 31 October 2021, and licence condition 17.1.1 forbids demanding extra information at withdrawal that could reasonably have been requested earlier. Offshore, that protection does not exist. In October 2026 a British operator paid £900,000 in a regulatory settlement for, among other things, terms allowing only one withdrawal request at a time and manual review of every fifth or tenth withdrawal. Offshore, that is simply the house style.
The Bonus Terms That Do the Damage
The four clauses to look for are dull and repeatable, which is what makes them easy to miss.
A wagering requirement of 25 to 50 times, where British licences are capped at ten. A maximum cashout that voids the rest — one operator sets it at 300 per cent of the credited bonus amount. A maximum bet while wagering, often 5 to 10 currency units, with winnings forfeited for a single breach. And a clause letting the operator void winnings at its sole discretion, which British guidance says is unfair within the meaning of the Consumer Rights Act 2015 and which has drawn fines: £170,000 in July 2025 for a term reserving the right to forfeit winnings at the operator's discretion.
Then there is the delay that is built into the paperwork rather than the rules. Under the money laundering regulations, identification and verification in a remote casino are required when a customer deposits, or withdraws funds or winnings, amounting to €2,000 or more. The threshold applies to linked transactions, not just one big one — the same customer, the same game, one logged-on session. UK licence condition 17.1.1 closes the obvious loophole by forbidding a licensee from demanding at withdrawal what it could reasonably have asked for at deposit, unless another legal obligation requires it. Offshore, no such condition exists, and a €2,000 link threshold combined with a documents request at withdrawal is a delay waiting to happen. The operator is not obliged to be quick, and there is no British body to tell it to be.
The Regulators Behind the Licences
The practical question is not "is it licensed" but "licensed by whom, and what does that regulator do". The table below compares the main alternatives on the things that matter to a complainant.
| Regulator | Licence cost signal | Verification route | Complaint route |
|---|---|---|---|
| GB Gambling Commission | Licence condition 5.1.2 requires payment via a Payment Services Regulations 2017 provider | Public register; domain must match | Operator, then approved ADR free of charge after 8 weeks |
| Curaçao (CGA) | EUR 47,450 total annual B2C fee | Certificate of Operation seal must redirect to cert.cga.cw | CGA supervision; ADR per operator terms |
| Anjouan | EUR 17,828 issuance, EUR 17,828 annual renewal | Licence number plus QR code to public register | Named, approved ADR provider; 30 days before escalation |
| Kahnawà:ke | USD 20,000 annual CPA fee, rising to USD 40,000 renewal from 1 January 2027 | Logo Certificate Program generates a Certificate of Good Standing | Full-time Dispute Resolution Officer |
| Malta (MGA) | EUR 5,000 application, EUR 25,000 annual fee, 5% gaming tax | MGA licence; published Unauthorised URLs list | MGA complaint form in English or Maltese |
| Costa Rica | No comprehensive licensing regime | None | None |
Costa Rica deserves its own sentence. Its Legislative Assembly rejected Bill No. 25,057 in early 2026, a bill that would have introduced mandatory licensing. The "data processing license" that appears in marketing material is not a licence in the legal sense. A site claiming Costa Rican licensing is claiming a regulatory vacuum.
Checking the Operator Before the First Deposit
The check that matters takes about ten minutes and is entirely lawful.
Go to the regulator's register and search the licence number. Look at the domain the certificate covers, not just the certificate. Find the ADR provider named in the terms and confirm it appears on the regulator's approved list. Read the withdrawal clause and note the maximum cashout. Look for the funds-protection statement. Then compare the bonus arithmetic: wagering multiple multiplied by the bonus, set against the cashout cap.
If any of those steps produces a shrug rather than an answer, the site has told you what it is. That is not a moral judgement about offshore gambling. It is a judgement about who holds the pen when the terms are read back to you.
Self-Exclusion, Stated Plainly
GamStop covers only the operators the Commission licenses. For a person who has registered, the exclusion blocks online accounts with all gambling companies licensed in Great Britain for six months, one year, five years, or five years with auto-renewal. Signing up takes minutes; the block can take up to 24 hours to take effect. It cannot be cancelled or deactivated during the term, and it stays in place after the term ends unless the person contacts GamStop to remove it. If it is not deactivated, GamStop holds the data through a further automatic seven-year period during which operators are told the person was previously excluded.
The scale of this is worth a moment. GamStop had 561,983 active exclusions at the end of 2025. As of July 2026 it reported 614,738 consumers currently on the register, of whom more than one in two had chosen the five-year option, and only one in four of all age groups had chosen six months. Under-25s accounted for nearly one in three of all self-exclusions in the first half of 2026, a 26 per cent year-on-year increase. May 2026 set a monthly record of 12,236 sign-ups.
An offshore site is not a way round that, in any sense the phrase is meant. It is a site that cannot see the register, so a person who registered there would be gambling while excluded, which is the exact behaviour the registration was meant to interrupt. And the identity problems compound it: the Commission warned in August 2026 that onboarding a customer under a middle name instead of a forename can create mismatches with records held elsewhere, such as GamStop, undermining the effectiveness of the whole scheme.
UK-licensed operators also carry the same obligations for land-based play. Under LCCP ordinary code 3.5.2 the minimum land-based self-exclusion period is not less than six nor more than 12 months, extendable in periods of at least six months, with a further six months automatically at the end unless the customer takes positive action, and a one-day cooling-off period. SENSE is the national scheme for licensed land-based casinos; the Commission's May 2026 FOI response put its active self-excluded customers at 12,445 between 1 April 2025 and 1 April 2026. Gamstop Betting Shops, formerly MOSES, runs a 12-month fixed term across over 60 operators and around 6,000 shops, with 9,075 active customers over the same period. Two schemes, two sets of terms, one principle: the term runs.
Where to Get Help
Anyone who wants to stop can, and it costs nothing. The National Gambling Helpline is operated by GamCare on 0808 8020 133, 24 hours a day, every day of the year; the same number reaches live chat and WhatsApp, and callers in Wales are given 0808 2819 265. BeGambleAware, the public-facing brand of the charity GambleAware, directs people to the same line. Gamblers Anonymous England, Wales & Ulster is on 0330 094 0322 with around 250 meeting locations and no appointment needed. GamFam (charity number 1191139) runs GRA5P, a five-stage peer-support programme for families. Citizens Advice offers free, confidential help with gambling-related debt, and Citizens Advice Scotland runs a support line on 0800 328 1131, Monday to Friday 10am to 3pm.
Blocking tools help too. GamStop signposts Gamban and BetBlocker. BetBlocker states it blocks over 1,368,000 gambling websites and 3,100 apps, requires no registration and is free worldwide. Gamban blocks licensed and unlicensed sites and is built to be hard to remove, but after the TalkBanStop funding ended on 31 March 2026 it is free only in Wales; in England and Scotland it costs £4.99 a month or £29.99 a year after a seven-day trial. Banks on the Commission's list — Bank of Scotland, Barclays, Halifax, HSBC, Lloyds, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling — offer gambling blocks at card level, applied per card, with a 48- or 72-hour cooling-off if switched off, and no effect on a credit score. A blocking tool covers the ground that a self-exclusion cannot reach.
Common Questions About Offshore Casinos
Is an offshore casino legal if I play there?
The law's weight falls on the operator. Section 33 of the Gambling Act 2005 makes it an offence to provide gambling facilities without an operating licence, and the Commission says that includes operators licensed elsewhere. For the player the harder problem is not criminality but remedy: the Commission cannot resolve an individual complaint against a site it does not license, and no British ADR provider has jurisdiction over one.
Can an offshore casino see my GamStop registration?
No. GamStop blocks accounts with operators licensed in Great Britain and is checked by those operators when someone tries to use an account. Registered details are not shared with companies outside that group. So registering with GamStop will not stop play at an offshore site, and a site that promotes itself to excluded players is advertising something it cannot lawfully provide for British customers.
Why do these sites ask for documents only when I withdraw?
Because the documents request becomes a delay rather than a barrier to a deposit. In a remote casino the money laundering rules require identification and verification at the €2,000 mark, counting linked transactions in a single logged-on session, and not everyone has been verified before that point. On a British licence condition 17.1.1 forbids this where the information could reasonably have been requested earlier. Offshore, nothing does.
What happens to my money if an offshore operator goes bust?
Usually nothing good. On a British licence the operator must hold customer funds separately and publish a protection rating — not protected, medium or high — and remind unprotected customers every six months. Even then, a segregated client account is not a guarantee of return, and operators may hold customer money in overseas bank accounts. Offshore, ask for the funds-protection clause in writing. If there isn't one, there isn't one.
Do offshore bonuses really have worse terms?
The multipliers speak for themselves: 25 to 50 times is the common range offshore, against a cap of ten times on wagering requirements that came into force on 19 January 2026 for British-licensed operators. Mixed-product promotions are banned here and routine there. The maximum cashout clause is the one that catches people out, because it caps the win long before the wagering is finished.
What if I have a complaint against an operator that is not on GamStop?
Start with the operator's own complaints process and give it the full eight weeks. Then check the named ADR provider in the terms and confirm it appears on the regulator's approved list. Anjouan's rules, for instance, require an approved provider to be named and expect resolution within 30 days before escalation. Keep every screenshot, and keep the terms as they stood when you deposited, not as they stand afterwards.
The Short Answer About the Shortcut
Online casinos not on GamStop are, in the end, a question about who reads the terms back to an operator when a customer says the terms were unfair — and in Great Britain that reader exists, from licence condition 7.1.1 through eight weeks of internal process to an approved adjudicator who decides free of charge, while offshore the reader is chosen by the operator itself.
That is the trade. And the number that frames it best is not a bonus figure at all: 614,738 people were on the GamStop register as of July 2026, more than half of them for the full five years, which tells you what a British self-exclusion is actually worth. If you need to speak to someone, the National Gambling Helpline is free on 0808 8020 133, 24 hours a day.
