Gambling Sites Not on GamStop and the Regulator

A gambling site not on GamStop holds no Great Britain licence, so the self-exclusion scheme has nothing to check it against. That means no UK stake limits, no ten-times wagering cap and no right to take a dispute to a British adjudicator. An offshore licence is not a way round an exclusion, which stays in force for its full term.

Gambling sites not on GamStop are, in plain terms, sites the Gambling Commission cannot touch. They hold a licence from Curaçao, Anjouan, Kahnawà:ke or Malta, or from nowhere at all, and they sit outside the scheme that Keith, a 44-year-old from Leeds, signed up to in a moment of clarity one Sunday night. (Names changed; the pattern is not.) The scheme they are outside of is the one everyone types as "gamestop". The Commission's own numbers tell the story better than any affiliate page: since April 2024 its Illegal Markets team has issued 3,140 cease and desist and disruption notices, referred 447,778 Bing and Google URLs and secured 287,961 removals. Across 160 illegal sites, engagement fell by an average of 32 per cent after disruption action. Registrar blocks did far more, cutting engagement by an average of 91 per cent.

So the regulator is not asleep. It is simply playing a game whose board keeps moving. This page looks at the market through that lens: what the Commission can do, what it cannot, and how the numbers on an offshore site's terms page compare with the standard set by British-licensed operators.

What Gambling Sites Not on GamStop Actually Are

Since 31 March 2020, every online operator must be part of GamStop as a condition of its licence, under the Gambling Commission's social responsibility code provision 3.5.5, which says licensees "must participate in the national multi-operator self-exclusion scheme". If a site takes British customers and is not in the scheme, the likeliest explanation is not an administrative oversight. It is that the site has no Commission licence to be in breach of.

An offshore site, then, is a commercial operation licensed somewhere else — Curaçao under the National Ordinance on Games of Chance, which took effect on 24 December 2024; Anjouan, a constituent territory of the Union of the Comoros; or Kahnawà:ke, whose gaming commission has regulated interactive gaming since 1999. Those are real regimes with real paperwork. They are also regimes whose standards, staff and reach are not the Commission's, and none of them polices British advertising or British consumer complaints.

The line that matters is not "licensed" versus "unlicensed". It is where the licence comes from and what it obliges the operator to do when something goes wrong.

The Curaçao Reforms and the Licence You Cannot Check

Curaçao is the most common flag of convenience, and it has just spent two years reorganising itself. The old master-licence and sub-licence model is gone: the four former master licensors stopped issuing on dates running from 18 August 2024 to 31 January 2025, and the legacy "orange" sub-licence certificates ended on 15 October 2025. Any site still displaying a /JAZ number as proof of a current licence is showing you a fossil.

The replacement is direct licensing by the Curaçao Gaming Authority, at EUR 4,592 one-time to apply and EUR 47,450 a year to hold. Two catches. First, the CGA announced on 7 October 2026 that its online gaming portal would not return to service and that it is working on an alternative way to verify licensed domains, because the previous digital licence seal may be affected. Second, even where a seal does work, clicking a Certificate of Operation Seal must redirect to cert.cga.cw — and if the certificate behind it names a different domain from the one you are on, you are looking at another operator's paperwork.

Anjouan, Kahnawà:ke and the Cheaper End of the Market

Anjouan charges EUR 17,828 to issue a B2C internet gaming licence and EUR 17,828 a year to renew it. An ABC News investigation published on 31 December 2025 reported that the island's licensing arm claims to have issued more than 1,300 gambling licences, and that Comoros financial intelligence officials described the corporate entity selling them as operating illegally; the same investigation reported that a former attorney-general of the Comoros called it "an illegal entity". Anjouan Gaming itself said on 10 June 2026 that a licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world" — a sentence worth reading twice. [unconfirmed]

Kahnawà:ke, by contrast, is small and strict. Operators must be hosted at a data centre in the Mohawk Territory, a Client Provider Authorization application is about to rise from USD 35,000 to USD 40,000 on 1 January 2027, and the commission's rule on self-exclusion is brutal in a way British rules are not: a player who breaches it forfeits deposits and winnings to a charity. Its logo generates a Certificate of Good Standing you can actually check.

What the Regulator Does About Unlicensed Sites

The Commission states plainly that it is illegal to offer commercial gambling services to consumers in Great Britain without a Commission licence, and that this includes operators licensed elsewhere. The offence sits in section 33 of the Gambling Act 2005, carrying up to 51 weeks' imprisonment on summary conviction, a fine at level 5, or both. Note who the offence attaches to: the operator, not the player.

Enforcement runs on volume and on plumbing rather than on prosecutions. Across April 2025 to March 2026, every quarter recorded zero or one prosecutions commenced — one in the whole year. What the Illegal Markets team does instead is choke the supply chain. In July to September 2026 alone it referred 1,835 websites to search engines, covering 7,677,211 URLs, and issued 546 cease and desist notices.

The Commission is candid about which tools work. GEO IP blocking and registrar blocks cut engagement more than search-engine removals, because a removal makes a site harder to find without blocking it. Registrar blocks and website suspensions produced an average 91 per cent fall in engagement each, against 30 per cent for Google removals and 8 per cent for Facebook removals. It made its first referral to Visa in January 2025 and describes payment-transaction reporting as still early-stage.

How Big the Unlicensed Market Is, and How Badly the Estimates Disagree

Here the careful reader should slow down, because the numbers are all over the place and the people publishing them have interests.

An industry-funded study and a campaign-group study differ by roughly an order of magnitude on the same phenomenon. I would treat the Commission's own survey figure — 2.5 per cent of online gamblers — as the most defensible, while noting that it cannot capture activity hidden behind a VPN. The Commission has said as much itself.

Why Offshore Sites Are Compared With British Ones

British-licensed operators are the benchmark, and they are not a moral category. They are simply operators with a rulebook attached, and the rulebook is specific. From 19 January 2026, wagering requirements on bonus funds are capped at ten times, and mixed-product promotions that require two or more types of gambling are banned. From 31 October 2025, every operator must prompt a customer to set a financial limit before their first deposit. Reverse withdrawals have been prohibited since 31 October 2021 under RTS requirement 14B, which states that consumers must not be given the option to cancel a withdrawal request.

Offshore, none of that applies. Ignition Casino publishes a 25× playthrough requirement and a wagering contribution chart giving roulette and baccarat 5 per cent, and craps, live dealer and Hot Drop Jackpots 0 per cent unless stated otherwise. BlueChip Casino caps a bonus bet at €5 for regular players, reserves the right to limit withdrawals from bonus winnings to 300 per cent of the credited bonus, and voids the excess. A British licence holder cannot do the last of those at all: a term imposing a maximum limit on withdrawals from the deposit balance is simply prohibited, and the Commission's own example of a banned clause is a £50 daily cap.

Terms That Build In Delay

The most instructive offshore clauses are not the ones about money. They are the ones about time.

Kahnawà:ke's voluntary self-exclusion is permanent and irrevocable — harsher on the player than GamStop's fixed terms. Anjouan requires its licensees to designate an approved Alternative Dispute Resolution provider, publishing EGIS ADR, Axion ADR, iGaming ADR and a commercial provider, and expects complaints to be resolved within 30 days before escalation. GamStop's own terms allow no removal during the exclusion period at all, and if a registrant does not deactivate at the end of their chosen term, their data is held through a further automatic seven-year self-exclusion period during which operators are told they were previously excluded.

Read those side by side and the pattern is clear: offshore rules sometimes look tougher on paper and simply have no enforcement behind them, while British rules look softer and arrive with a regulator, a dispute route and a helpline attached.

Verification as the Key Mechanism

If a single mechanism decides whether an offshore account is workable, it is identity verification — and specifically when it happens.

Under the Money Laundering Regulations, a remote casino must identify and verify a customer when deposits or withdrawals reach €2,000, singly or in transactions that appear linked. British licence condition 17 goes further: it requires licensees to obtain and verify identity before the customer is permitted to gamble, and to tell customers what documents they may need before the first deposit. The Commission's blog of 12 August 2026 said it expects those checks brought forward, and that onboarding a customer on a middle name rather than a forename can create mismatches with records held elsewhere — including GamStop — undermining self-exclusion itself.

Offshore the sequence is often reversed. Deposits clear instantly, sometimes in crypto, and the first serious check arrives when a withdrawal is requested. The Commission's blog of 12 August 2026 reported that over a quarter of complaints reaching its Contact Centre concern identity verification, raised by customers asked for documents only on attempting to withdraw. British licence condition 17.1.1 addresses exactly this: a withdrawal request must not trigger a demand for information the licensee could reasonably have requested earlier.

Warning signs of a verification trap: a term reserving sole discretion to void winnings; a document request arriving only after a win; a maximum bet rule while wagering set at a fraction of the deposit; bonus funds and deposit balance not shown separately. Kahnawà:ke requires operators to let a player set limits including zero, and to keep terms free of unfair conditions — a standard worth holding offshore sites to, even where nothing obliges them.

Five Signs an Operator Can Be Trusted

Trust is not a feeling. It is a set of things you can look up in ten minutes.

The Regulator Is Named and Findable

A trustworthy site names its regulator and gives you a route to verify it. Check it: click the seal. A CGA Certificate of Operation Seal must redirect to cert.cga.cw; if the certificate shows a domain different from the one in your address bar, the site is displaying someone else's paperwork. A Kahnawà:ke logo should generate a Certificate of Good Standing. Anjouan certificates carry a licence number and a QR code linking to a public register, and the authority's own policy says certificates that cannot be verified there should not be relied upon. A "data processing license" from Costa Rica is not a gambling licence — Costa Rica has no comprehensive licensing regime, and its Legislative Assembly rejected Bill No. 25,057 in early 2026.

Customer Funds Are Rated and Disclosed

British licence conditions 4.1.1 and 4.2.1 require customer funds to be held in a separate client account and the protection level to be stated in writing as "not protected", "medium protection" or "high protection", acknowledged by the customer before gambling. Check whether the site says any of that. If it says nothing, that is your answer.

Withdrawals Have Stated Times and No Maximum

Check the cashier page for a published processing time and for any cap on what can be withdrawn. Some sites impose one withdrawal request at a time; one licensee paid £900,000 in a regulatory settlement announced on 21 October 2026 for failures including unnecessarily delaying consumer withdrawals, and one of the offending terms did precisely that. Casino withdrawal complaints to the Commission fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025 — the direction of travel is right, and only in the licensed market.

Bonus Terms Are Specific, Not Discretionary

Check the wagering multiple, the game contribution table, the maximum bet while wagering and any maximum cashout. Vagueness is a tactic. Terms giving the operator sole discretion to withhold winnings are unfair within the meaning of the Consumer Rights Act 2015 in the UK, and one operator was fined £170,000 in July 2025 for failures including a term reserving the right to close accounts or forfeit winnings at its own discretion.

There Is a Named Dispute Route

A trustworthy operator names an ADR provider and does not hide it. eCOGRA's report for 1 October 2024 to 30 September 2025 records 911 disputes received, 150 of them valid "Deposits & Withdrawals" disputes, with an average 31 days to resolve and 17.8 per cent ruled in favour of the consumer. IBAS handled 3,721 domestic disputes in the same period, 217 categorised as banking or financial, with an average completion time of 20 days. Offshore, the equivalent is an Anjouan-approved provider with 30 days to respond. Free of charge either way — but only one of the two routes has a regulator standing behind it.

How to Judge an Offshore Site in Six Steps

1. Check the Licence, Not the Badge

Look up the regulator's public register and match the domain name to the licence. A badge is artwork; a register entry is evidence.

2. Read the Withdrawal Section Before the Bonus Section

The bonus is marketing. The withdrawal clause is the contract. Look for caps, single-withdrawal rules and manual review thresholds.

3. Work Out the Wagering Multiple and the Contribution Table

Multiply the bonus by the playthrough, then check what actually counts towards it. A 25× requirement on a game contributing 5 per cent is effectively a different number entirely.

4. Check the Country and Currency Position

An offshore site may accept British customers without being set up for them. Currency conversion and FX mark-ups on the way out are common and rarely advertised.

5. Set Your Own Limits Before You Deposit, Not After

Under British rules a financial limit prompt before the first deposit has been mandatory since 31 October 2025. Where it is offered, use it; where it is not, write the number down anyway.

6. Establish the Dispute Route Before You Need It

Check whether there is an ADR provider, what the deadline for submitting a dispute is, and whether disputes must go through the operator's internal process first. eCOGRA's data shows 361 of 499 invalid disputes failed precisely because the internal process had not been completed.

Where the Help Is

If gambling has become a problem, the National Gambling Helpline is run by GamCare on 0808 8020 133, free, 24 hours a day, every day of the year. In Wales the number is 0808 2819 265. The NHS National Gambling Clinic in London takes self-referrals for adults in Greater London and the South East and for young people aged 13 to 18 from anywhere in England; 15 specialist NHS gambling clinics have opened across England since 2019, and eight regional services now receive almost 5,000 referrals a year against a target of 3,000. Citizens Advice Scotland's Gambling Support Service line is 0800 328 1131, Monday to Friday, 10am to 3pm. Gamblers Anonymous runs around 250 meeting locations across England, Wales and Northern Ireland, and Gam-Anon supports families and friends whether or not the gambler attends.

One point of principle, stated once and plainly: self-exclusion holds for its full term, and after that it remains in place until the person contacts GamStop to remove it. There is no off-switch while it runs. Registrations cannot be removed early, and the scheme's own 2025 annual report devotes a section to its refusal to do so. A site that has never heard of GamStop is not offering a way round that. It is simply not checking.

Can an Offshore Site Be a Fair Game?

Here is the honest answer. A British licence is not a guarantee of virtue — the enforcement notices, the £900,000 settlement, the fines for discretionary terms all come from within the licensed market. What it guarantees is a floor. Ten-times wagering caps, a ban on reverse withdrawals, a withdrawal request that cannot trigger a fresh document demand, a dispute you can take to an adjudicator for free, and a helpline financed by a statutory levy that raised just under £120 million in its first year.

Offshore, that floor does not exist. The regulator knows it, which is why it stops at nothing more dramatic than plumbing: 586 illegal sites accessible to British consumers were recorded in September 2026, 311 of them disrupted in a single quarter, 77 per cent of those showing reduced traffic. The strategy is attrition, not closure. And the attrition is working slowly: measured across 160 illegal gambling websites, engagement fell an average of 32 per cent after disruption action — a number that is either encouraging or damning depending on whether you are reading it as progress or as the remaining two-thirds.

Questions About Gambling Sites Not on GamStop

What gambling sites are not on GamStop?

Any site without a Gambling Commission licence, because the scheme's obligations attach only to British-licensed operators. That means Curaçao-licensed sites, Anjouan-licensed sites, Kahnawà:ke-licensed sites, and a long tail holding no verifiable licence at all. It is worth distinguishing them, because the standards behind those licences differ enormously — Anjouan's annual fee is EUR 17,828, Curaçao's is EUR 47,450, and the enforcement machinery behind each is not comparable.

Is a gambling site not on GamStop legal in the UK?

It is legal for an adult in Great Britain to gamble with an offshore operator. It is illegal for that operator to offer commercial gambling services to consumers in Great Britain without a Commission licence, under section 33 of the Gambling Act 2005, carrying up to 51 weeks' imprisonment on summary conviction, a level 5 fine or both. The offence attaches to the provider. Note also section 330, which makes knowingly advertising unlawful gambling an offence.

Are welsh gambling sites not on gamstop covered by UK rules?

There is no distinct Welsh regulatory regime for online gambling; the Gambling Commission licenses to Great Britain as a single market, so a Welsh player has exactly the same protections, and the same gaps, as one in England or Scotland. The differences are practical: the National Gambling Helpline number for callers in Wales is 0808 2819 265, and Gamban blocking software is free to Welsh residents while costing £4.99 a month in England and Scotland after the TalkBanStop scheme ended on 31 March 2026.

Do best gambling sites not on gamstop pay out quickly?

Some publish fast times and meet them; the category has no enforced standard. British-licensed operators have one: Commission data for June to September 2024 covering 44.2 million withdrawals found 96.3 per cent cleared automatically, 3.5 per cent within 24 hours and 0.1 per cent up to 48 hours. Offshore, the terms decide it, and a maximum cashout clause or a manual-review trigger can turn a published two-hour payout into a fortnight.

Can an offshore site be used to get around a self-exclusion?

No. Self-exclusion is not a lock on a website; it is a status recorded against a person, and it holds for its full term and afterwards until the person contacts GamStop to remove it. A site with no UK licence has no way to check that status because it is not in the scheme. Using one does not lift the exclusion — it just means nobody is looking. The Commission's January 2025 warning notice specifically flagged unlicensed sites targeting self-excluded customers.

How much of the UK market is on these sites?

Estimates diverge wildly and the divergence tracks who paid for them. Gambling Commission survey analysis published 5 November 2026 puts engagement with illegal sites at 2.5 per cent of people who had gambled online in the past four weeks. H2 Gambling Capital estimates £16.6 billion was staked with illegal operators in 2025, up from about £5 billion in 2019. An industry-commissioned study put online black-market stakes at £2.7 billion. Treat the survey as the most neutral of the three.

Gambling Sites Not on GamStop

They exist, they take British money, and the regulator's answer is attrition rather than arrest — 3,140 notices since April 2024 and an average 32 per cent drop in engagement across 160 sites is a real result and still leaves most of the market standing. The trick is not to ask whether a site is offshore, but when its checks arrive: front-loaded and boring, or late and pointed. And if gambling stops being fun, the National Gambling Helpline is 0808 8020 133, free, 24 hours a day, every day.