Slots Without GamStop and Regulator Action on Unlicensed Sites

Slots without GamStop means playing at a site that is not licensed in Great Britain, so the scheme cannot block it. UK protections, the £5 stake cap and the ten-times wagering limit do not apply there. The Gambling Commission disrupts such sites rather than licensing them, and no UK help body can recover money lost on one.

Slots without GamStop is a search that begins with a grievance and ends, usually, at a website with a Curaçao seal and a live chat window. I understand the grievance. GamStop is a blunt instrument: it blocks the whole of the British-licensed market for six months, a year or five, it cannot be undone early, and a person who registered in a bad week finds the decision following them for years. That bluntness is deliberate, and it is also the point. The scheme is not a break from gambling, it is a wall, and walls do not have doors in them.

So the question worth answering is not whether such sites exist. They do, in quantity, and the Commission's own illegal gambling dashboard counted 586 of them accessible to British consumers in September 2026. The question is what happens to them, and what somebody sitting at one of them has actually given up. The short answer is: rather a lot, and mostly in the paperwork nobody reads.

I have spent years reading operator terms and Commission notices, and the gap between what these sites promise and what they can deliver is the largest in the trade. This page is about that gap. It is also about the regulator, because the regulator is the only party in this story with any power, and what it does — and does not do — is the real substance of the topic. One detail before we go further: the scheme's name is GamStop, though it is very often typed "gamestop", and some sites trade on that misspelling. 13.11.2026.

How the Law Treats a Slot Site That Sits Outside GamStop

It is a criminal offence to provide gambling facilities in Great Britain without an operating licence. That is section 33 of the Gambling Act 2005, in force since 1 September 2007, and on summary conviction it carries up to 51 weeks' imprisonment, an unlimited fine at level 5, or both — six months in Scotland. The offence attaches to the operator, not to the player. No adult in Britain commits an offence by placing a bet on a slot at an unlicensed site. That distinction is real, and it is also where the comfort ends.

What makes the law awkward in practice is its reach. Section 33 applies to remote gambling where at least one piece of remote gambling equipment is situated in Great Britain, and under the post-2014 wording also where the provider knows or should know the facilities are likely to be used here. The Commission's published position, from 21 October 2024, is blunt: it is illegal to offer commercial gambling services to British consumers without a Commission licence, and that includes operators licensed elsewhere. A Curaçao or Anjouan licence is not a defence in a British court. It is a foreign permission slip.

The player's exposure is a different shape. Civil, not criminal. There is no regulator to complain to, because the Commission is not an ombudsman — it cannot resolve individual complaints or get money back. There is no approved Alternative Dispute Resolution provider with jurisdiction over a site outside the licensing regime, and even if the operator has voluntarily signed up to one, as Anjouan requires of its licensees through EGIS ADR, Axion ADR, iGaming ADR and other providers, the player must first exhaust the operator's own complaints process and wait up to 30 days. Offshore sites do hold no UK Gambling Commission licence, and the scheme's obligations bind only British-licensed operators [unconfirmed — the position is stated by trade and press sources rather than on a primary regulator page, though it is consistent with the scheme's own terms of use]. Withdrawal disputes that reach a British ADR provider take, on eCOGRA's figures for October 2024 to September 2025, an average of 31 days for domestic disputes — and that is for consumers at licensed sites, with a regulator standing behind them.

What the Licence Actually Buys

Everything a British-licensed casino must do, an unlicensed one may skip. That is the whole of the comparison, and it is worth setting out line by line, because the differences are not philosophical. They are things that happen to money.

The stake caps arrived quietly and matter enormously. The £5 limit for all adults went live on 9 April 2025, the £2 limit for 18- to 24-year-olds on 21 May 2025, imposed by the Gambling Act 2005 (Operating Licence Conditions) (Amendment) Regulations 2025 and attached as a condition to every remote casino operating licence. They apply to online slots only — not roulette, not blackjack. The 2.5-second interval between game cycles came from the Commission's 2021 games design work and sits in RTS 14D. A game that spins every few seconds is a different product from one that cannot; the cap on the number of decisions per hour is the cap that actually bites.

Then the bonus rules. Since 19 January 2026, wagering requirements on bonus funds are capped at ten times, delivered by amending Social Responsibility Code 5.1.1 of the Licence Conditions and Codes of Practice. The Commission chose a cap over an outright ban, having consulted on thresholds of 1, 5 and 10 times, and said plainly that the limit "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements". Offshore terms run 25×, 35×, sometimes 50× on a welcome offer and higher on a no-deposit chip. Same game, different arithmetic, and the arithmetic decides whether a win is ever a win.

The reverse withdrawal ban is the one I would keep if I could keep only one. RTS requirement 14B — "Consumers must not be given the option to cancel their withdrawal request" — has been in force since 31 October 2021. Before it, a player could request a payout, see it pending, cancel it out of boredom or hope, and lose the lot. That option is still there on plenty of offshore platforms. It is worth saying what it is: a machine for converting a decision into a wager.

What the Commission Does About Unlicensed Sites

The regulator's answer is disruption, not prosecution. Its Illegal Markets team issued 3,140 cease and desist and disruption notices in the period from April 2024 — 2,032 cease and desist notices, 774 registrar referrals, 402 host referrals and 3 payment provider referrals — while referring 447,778 Bing and Google URLs and securing 287,961 URL removals. That is a great deal of paperwork aimed at the plumbing of these sites rather than at the operators, who are usually somewhere the Commission cannot reach.

The Commission is admirably honest about what works. Measured across 160 illegal gambling websites with traffic data, engagement fell by an average of 32 per cent after disruption. Broken down by method, the numbers get more interesting: registrar blocks and website suspensions produced an average fall of 91 per cent each, GEO IP blocking 60 per cent, Bing removal 52 per cent, Google removal 30 per cent and Facebook removal 8 per cent. Deleting a site from search results makes it harder to find; cutting its domain or its country-level access takes its players away. Its own conclusion, published in October 2025, is that GEO IP blocking and registrar blocks beat search-engine removals because removal does not fully block access.

Enforcement has accelerated. In January to March 2026 the Commission referred 226 websites to search engines and issued 98 cease and desist notices. In April to June 2026 it referred 366 websites, covering 147,721 URLs, and began no criminal investigations at all. In July to September 2026 it referred 1,835 websites — 7,677,211 URLs — and issued 546 cease and desist notices. Across the whole year from April 2025 to March 2026, every quarter recorded either zero or one prosecution commenced, a single prosecution in the quarter from October to December 2025.

Read those two sets of numbers together and the strategy is legible. The Commission is not building criminal cases against operators it cannot extradite. It is going after domains, hosting and payment rails, and it is candid that the payment side is early-stage: reporting transaction data to the Visa Operator Scheme is described in its own October 2025 report as critical and still early. The scale of the problem has barely moved. Illegal gambling websites identified through the Commission's affiliate-page method rose from 364 in May 2024 to 535 in July 2025, and 311 sites had disruption action taken against them in the second quarter of 2026–27, 38 per cent more than the previous quarter, with 77 per cent of them showing reduced estimated traffic. Disruption, in other words, works on the sites it touches, and it does not touch enough of them.

The Disappearing GamStop Block

This is the thing the whole topic turns on, so it deserves precision. A GamStop registration blocks a person from gambling with every online gambling company licensed in Great Britain, for six months, one year, five years, or five years with auto-renewal. Signing up takes a few minutes, but the block can take up to 24 hours to become effective, and once registered it cannot be cancelled or deactivated during the exclusion period. At the end of the chosen term it does not lapse. It stays in place until the person contacts GamStop to remove it, and if they never do, GamStop holds the data through a further automatic seven-year self-exclusion period during which operators are told the person was previously excluded. Under the terms of use, auto-renewal can only be switched off in the last six months of a five-year period, and it continues for up to four further five-year terms. The Group's 2025 annual report devotes a section to its refusal to remove registrations early.

That is the trap. Not that a block exists, but that it has no natural end. The register held 561,983 active exclusions at the end of 2025, and by July 2026 reported 614,738 people on it, with more than one in two having chosen the maximum five-year exclusion and only one in four of all age groups opting for six months. When people are offered a short term, they take a long one. Of the periods selected in 2025, 29 per cent chose six months, 24 per cent a year, 25 per cent five years and 22 per cent auto-renewal. Under-25s were nearly one in three of all new self-exclusions in the first half of 2026, a 26 per cent year-on-year increase.

The practical question — how does a person at an unlicensed site know whether the block is being applied? — has an uncomfortable answer: they do not, unless they check. The first time, the check happens at registration or first deposit, when the operator tests the details supplied against the register. After that it is meant to recur: since April 2020, every British-licensed operator must check its entire customer base against the register at least every 24 hours, which is also what stops registered people receiving direct marketing. With no such duty, an offshore site's diligence rests on whatever it chooses to do, and a name spelled slightly differently, a middle name used instead of a forename, is enough to break the match.

The warning signs of a site that treats its own rules loosely are easier to see than the block's absence. Terms reserving the operator's sole discretion to void winnings. A first withdrawal that triggers a documents request when none was made at deposit. A bonus balance displayed in the same figure as the deposit. A support agent who cannot name the regulator or produce a certificate that resolves to a public register. Commission guidance is clear that operators should not use terms giving them sole discretion to void or withhold winnings because such terms are unfair under the Consumer Rights Act 2015 — and equally clear that no such constraint follows an unlicensed site. Self-exclusion, wherever it exists, holds for its full term and then remains until the person contacts GamStop to remove it. Every check that matters here is free: the Commission's public register, licence number in hand.

Five Signs a Slot Site Can Be Trusted

The test is not whether a site pays when everything is straightforward. It is whether the site has something to lose. These five checks take about a quarter of an hour in total.

A licence number that resolves on the regulator's own register

A British licence is a set of obligations with a regulator behind them. The Commission advises consumers to check before gambling that the business holds a licence and to click through to its public register to see whether the site's activities and domain names match. Quick check: find the licence number in the footer, search it on the public register, and confirm the domain you are on is listed. A Curaçao site is harder to verify than it looks — the old "orange" sub-licences ended on 15 October 2025, four former master licensors stopped issuing on dates running from 18 August 2024 to 31 January 2025, and the CGA has said its previous online portal will not return, so a legacy /JAZ number or seal is not independent proof of a live licence. A certificate behind a Curaçao Certificate of Operation seal should redirect to cert.cga.cw; if it does not, or if the certificate names a different domain, the site is unauthorised.

Withdrawal terms with no ceiling and no timer

The clearest single indicator of an operator's intentions is what its terms say about taking money out. British rules prohibit any maximum limit on what a consumer may withdraw from their deposit balance; the Commission's own example of a prohibited term is "You may withdraw up to £50 per day and up to £500 per week". Quick check: search the terms for withdrawal limits, maximum cashout, and any clause letting the operator void winnings at its discretion. On an unlicensed site, expect to find all three — a capped cashout expressed as a multiple of the bonus is normal offshore practice.

A payout that is measured against the market

Speed is measurable, and the market standard is high. Commission data for June to September 2024 covering 44.2 million withdrawals by customers of large online operators records 96.3 per cent clearing automatically, 3.5 per cent within 24 hours and 0.1 per cent taking up to 48 hours. Quick check: take the first withdrawal small, time it, and note whether anything was requested that could have been requested at deposit. Where an operator has no regulatory concerns about a customer, the Commission says there is no valid reason to delay a payout. Offshore, the only clock is the operator's.

Terms on bonuses that are transparent and capped

Bonus terms are where offshore sites differ most from the British standard. Since 19 January 2026 British licensees cannot apply wagering requirements over ten times, and cannot mix more than one type of gambling product in a single incentive — "Bet £5 and get 20 free spins" is non-compliant, "Bet £5 and get £10 free bet" is fine. Quick check: find the wagering multiple, the game contribution table, the maximum bet while wagering and the expiry date, and put it beside the spin interval. A 50× requirement on a slot that spins every two seconds is not a bonus, it is a subscription.

Funds that are segregated and a dispute route that exists

Money held by a British-licensed remote operator must sit in a separate client bank account, and the operator must publish one of three protection ratings — not protected, medium, high — with a six-monthly reminder to customers at the lowest rating. Even then, a separate account does not guarantee return on insolvency. Quick check: read the customer-funds clause and the complaints clause together. A site with no named ADR provider, no stated resolution timetable and no independent third party in the chain is a site where the final appeal is to the people holding the money.

How to Judge an Offshore Slot Site in Six Steps

None of this is exotic. It is the ordinary due diligence a careful person applies to anything bought at a distance, and it takes less time than a losing session.

1. Check the licence, then the domain. Find the licence number and confirm on the regulator's public register that this specific domain is covered. Reason: an unlicensed site is not a rule-breaker, it is a site with no rules, and section 33 of the Gambling Act 2005 makes its operation a criminal matter in Great Britain.
2. Read the withdrawal clause before depositing. Look for maximum cashout, per-day or per-week withdrawal caps, processing fees and any discretion to void winnings. Reason: this is the clause that decides whether a win is real, and it is buried for a reason. A British-licensed operator cannot impose a maximum limit on withdrawals from the deposit balance; an unlicensed one can.
3. Compare the wagering multiple against the British cap of ten times. Note the contribution percentages for table games and live dealer, the maximum bet while wagering, the expiry period and whether the cashout is capped. Reason: a 50× requirement on a low-contribution game is close to unwinnable, and offshore terms are not bound by the ten-times limit that has applied to British licensees since 19 January 2026.
4. Set hard limits inside the site, and know what they are not. Use the account's deposit limits, loss limits and reality checks. Reason: they are only as good as the site's willingness to enforce them, they are not a substitute for a scheme that operates across the whole market, and a self-exclusion registered with GamStop holds for its full term and then stays in place until the person contacts GamStop to remove it.
5. Check what the payment rail will do. A bank gambling block declines payments to merchants categorised under gambling Merchant Category Codes, and the Commission's list of banks offering one, last updated 16 October 2026, names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling. Reason: it is applied at card level, so it must be switched on for each card, and the cooling-off when it is turned off is usually 48 or 72 hours — a delay that only matters if it exists before the urge arrives.
6. Add blocking software and know what it can reach. GamStop signposts Gamban and BetBlocker; BetBlocker states it blocks over 1,368,000 gambling websites and 3,100 apps, free and without registration. Reason: Gamban states it blocks licensed and unlicensed sites alike — the one form of protection in this list designed to work where the licence does not reach. It is free in Wales but costs £4.99 a month or £29.99 a year in England and Scotland after a 7-day trial, following the end of the TalkBanStop funding on 31 March 2026.

Where the Money Goes When It Stays Legal

The market split is usually quoted in whichever direction suits the speaker, so here are the numbers side by side. The Commission's estimate published 5 November 2026 puts engagement with illegal gambling websites at 0.6 per cent of all respondents in the past four weeks and a further 0.4 per cent in the past 12 months, with 94.4 per cent showing no indication of using one. Among people who had gambled online in the previous four weeks, the figure is 2.5 per cent, plus another 1.5 per cent over the year — a small share, but of a very large pool.

H2 Gambling Capital estimates the amount staked with illegal operators in the UK reached £16.6 billion in 2025, against about £5 billion in 2019, with the proportion of gambling happening legally falling from 97 per cent to 92 per cent. A Frontier Economics study for the Betting and Gaming Council put online black-market stakes at £2.7 billion a year, 2.1 per cent of the £128 billion staked with British-regulated remote operators. Yield Sec, working for the Campaign for Fairer Gambling, put Great Britain's online market at £8.8 billion GGR in 2025, split 91 per cent regulated and 9 per cent unregulated. These estimates disagree by a factor of several. The Commission's own methodology combines web-traffic data with a licensed-play assumption of £0.32 GGY per minute for online slots, and it explicitly notes that it does not capture activity hidden by VPNs.

So the honest position is that nobody knows the true size of this market, and the confident figures come from parties with an interest. The regulated market is the size we can measure: total Great Britain gross gambling yield was £17.5 billion in the year to March 2026, up 4.4 per cent, with remote casino, betting and bingo at £8.3 billion and online slots alone at £773 million for the quarter from January to March 2026, up 12 per cent year on year. That is where the volume is, and it is where the protections are.

The Money That Gets Caught in an Identity Check

This is the section the payment speed tables never mention. Nearly every offshore slot payout eventually runs into a verification request, and the way it is handled is the difference between a delay and a confiscation.

The British standard is unambiguous. Licence Condition 17.1.1, in force since 7 May 2019 and still current, requires licensees to obtain and verify identity information before a customer is permitted to gamble, and the Condition was tightened so that a withdrawal request must not result in a demand for information the licensee could reasonably have requested earlier. The Commission's guidance expects identity and age checks to be brought forward to before a customer deposits or stakes, and it treats onboarding on incomplete or inaccurate information — initials instead of full names, nicknames, commercial addresses — as insufficient, partly because a mismatch with records held elsewhere undermines self-exclusion. Cash staked within an open bet is not customer funds, and money deposited but not staked remains the customer's: licensees may not confiscate it on the basis that identity or age verification failed.

Offshore, none of that applies. The €2,000 threshold in the Money Laundering Regulations, the hybrid approach that lets a remote casino verify age at registration and defer full verification, the ten-minute electronic checks — these are British and EU arrangements. The Commission's own risk assessment for 2026 rates the remote casino sector high risk for money laundering, and it reports a rise in attempts to bypass checks with fake documents, deepfakes and AI face swaps. Where a site has no supervision, an ID request at withdrawal time is not a compliance step. It is discretionary.

The warning signs are worth memorising, because they arrive at the worst possible moment. A verification demand that appears only when a withdrawal is requested. A request for documents that cannot be satisfied — a utility bill in a name that does not match the account. A term allowing the operator to void winnings where verification fails. A refusal to say which regulator has jurisdiction. Each of these is ordinary in the offshore market and prohibited in the British one. Customers at licensed sites still struggle with it: the Commission reported in August 2026 that over a quarter of complaints reaching its Contact Centre concern identity verification, a figure that includes people asked for documents only when they tried to withdraw. If that is the experience with a regulator watching, consider what it looks like without one.

What the Regulator Cannot Do for You

The most important fact about the Gambling Commission is a negative one. It is a regulator, not an ombudsman: it cannot resolve individual complaints or help a consumer get money back, though it records every complaint and typically refers disputes to an independent third party. British-licensed operators must offer a free ADR route if a complaint is not resolved within eight weeks, and the consumer must have gone through the operator's own procedure first — the operator may issue a deadlock letter confirming that. ADR providers cannot look at customer service complaints, or at a refusal to accept a bet or a customer's custom.

Even on the licensed side the process is not quick. eCOGRA's report for October 2024 to September 2025 records 911 disputes received, 150 of them valid deposit and withdrawal disputes, an average of 31 days to resolve a domestic dispute, and 17.8 per cent of completed disputes decided in the consumer's favour against 82.2 per cent for the operator. IBAS's 2024–25 report records 3,721 domestic disputes, 217 categorised as banking and financial, an average completion time of 20 days, and 65 consumer complaints upheld by written decision against 693 not upheld. IBAS reports 100 per cent operator compliance with decisions in the consumer's favour. That compliance is the payoff of the licence: a British operator obeys an adjudicator because losing the licence costs more than the dispute. An operator with no British licence has nothing to lose, and a decision against it is a letter.

The Companies That Left, and the Empty Chairs They Left Behind

The enforcement cases that matter here are not the headline fines. They are the operators that walked away. In May 2025 the Commission announced that TGP Europe was leaving the GB market following an investigation, that the sites it operated were now unlicensed and might not provide protections against criminality or gambling-related harm, and that it had contacted five football clubs about sponsorship arrangements with unlicensed gambling businesses. An operator can stop being licensed on a Tuesday and keep trading on a Wednesday. The domain is the same, the games are the same, the only thing that has changed is the footnote.

There is a harder edge too. On 3 April 2020 the Commission suspended the licences of two online operators for failing to integrate GamStop by the 31 March 2020 deadline, under section 118(2) of the Gambling Act 2005. Those were sites inside the system being pushed out of it. The ones outside were never in it. The Commission's January 2025 industry warning notice noted that casino games supplied by licensed operators were appearing on unlicensed websites available to British consumers, and that those sites often target customers who have self-excluded through GamStop and may have inadequate social responsibility and anti-money-laundering controls. That is the trade in a sentence: the software is licensed, the site is not, and the audience is people who have already asked to be left alone.

The Gambling Commission states that it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a licence from the Commission, including where the operator holds a licence in another jurisdiction. I would put that sentence on the landing page of every comparison site in the country, and I would put the help line number under it: 0808 8020 133, the National Gambling Helpline operated by GamCare, free, 24 hours a day, every day of the year, also reachable by live chat and WhatsApp. It is not a crisis line — staff cannot transfer callers at immediate risk and follow their own safeguarding procedures instead — but it is staffed by people who have heard this story before.

Questions I Get Asked About Slots Without GamStop

Is it illegal to play slots at a site that is not on GamStop?

No. Section 33 of the Gambling Act 2005 makes it an offence to provide gambling facilities in Great Britain without an operating licence, and that offence attaches to the operator, not the player. The Act's general gambling offences are aimed at those who provide facilities, with narrow exceptions for children and young people. An adult placing a bet at an unlicensed site commits no offence — but also has no enforceable right when the site keeps the money.

Can a British-licensed slot site be outside GamStop?

No. Since 31 March 2020, every online operator must be part of GamStop as a condition of its Gambling Commission licence, and the requirement sits in social responsibility code provision 3.5.5 of the Licence Conditions and Codes of Practice: "Licensees must participate in the national multi-operator self-exclusion scheme." So a site claiming a British licence while sitting outside the scheme is either not licensed or not telling the truth.

Why is my GamStop block still in place after my chosen period ended?

Because the exclusion does not lapse at the end of the term. Once registered, it cannot be cancelled during the exclusion period and stays in place afterwards unless the person contacts GamStop to remove it. If they never do, GamStop holds the data through a further automatic seven-year period during which operators are told the person was previously excluded. It holds for its full term and then until GamStop is asked.

Do unlicensed sites have lower wagering requirements on slot bonuses?

Rarely. Offshore welcome offers commonly run 25× to 50×, with no-deposit bonuses higher and a cashout cap attached. Since 19 January 2026 British licensees cannot apply wagering requirements above ten times on bonus funds, and cannot mix more than one gambling product in one incentive. One published offshore term caps winnings from bonus funds at 300 per cent of the bonus, with any excess voided — a ceiling British rules prohibit outright.

What actually happens to an unlicensed slot site that targets British players?

Disruption rather than prosecution. The Commission's Illegal Markets team issued 3,140 cease and desist and disruption notices from April 2024, referred 447,778 search engine URLs and secured 287,961 removals. Across the year to March 2026 there was one prosecution commenced. Registrar blocks and suspensions cut engagement by 91 per cent on average, GEO IP blocking by 60 per cent — but new sites replace them faster than that.

Can a bank block or a blocking app stop an unlicensed slot site?

Often, yes, which is why they matter. A bank gambling block declines payments to gambling Merchant Category Codes and is applied at card level, so it must be switched on for each card; the Commission lists eleven banks offering one. Blocking software goes further: GamStop signposts Gamban and BetBlocker, and Gamban states it blocks licensed and unlicensed sites — the only protection here designed for where the licence does not reach.

The Regulator Is the Difference, Not the Site

The lesson of this corner of the market is that the promise word in the keyword is a distraction: "without GamStop" describes a licensing status, not an advantage, and the sites selling that phrase are selling the absence of the only body that can make them behave — which is why the Gambling Commission's ceaseless, unglamorous disruption work, 546 cease and desist notices in a single quarter, matters more than any welcome offer.

Anyone who needs support can call the National Gambling Helpline free on 0808 8020 133, 24 hours a day, every day.