A UK casino not on GamStop is one run without a Gambling Commission licence, so it sits outside the scheme, outside British consumer protections and outside the rules that govern bonuses, withdrawals and complaints. Anyone using one has no UK regulator to appeal to and no licence for the Commission to suspend.
GamStop is worth stating plainly before anything else, because a good deal of the traffic searching this subject arrives with the wrong idea about it. The scheme blocks online accounts with all gambling companies licensed in Great Britain. It does not block the internet. An offshore casino keeps taking British customers precisely because it never joined, and the only reason it can is that no British regulator has authority over a company licensed elsewhere. That is the entire commercial premise of the sector, and everything else on this page follows from it.
I have covered this trade long enough to be tired of two opposite sales pitches. The first says offshore sites are dens of thieves. The second says they are the last refuge of the free punter. Neither survives contact with the Commission's own paperwork. Since April 2024 the Illegal Markets team has issued 3,140 cease and desist and disruption notices and secured 287,961 URL removals, which tells you the regulator is not idle. It also tells you how much keeps growing back. What follows is what the numbers say, what the rules do and do not cover, and how to read a site that has deliberately put itself beyond all of it.
One fact about the name, since it misleads people: the scheme is often typed "gamestop", which is a share ticker and not a gambling thing. It is GamStop.
Table of Contents10
- What "Not on GamStop" Actually Means
- The Commission's Own Scoreboard
- Licensed Sites Set the Bar
- How Offshore Sites Compare
- The Paperwork That Decides Everything
- Five Signs An Operator Can Be Trusted
- Seven Steps Before Trusting One With Money
- Blocking, Banks and the Helpline
- Questions People Commonly Ask
- What the Regulator Is Actually Doing
What "Not on GamStop" Actually Means
The phrase describes a legal position, not a feature. Under section 33 of the Gambling Act 2005 it is an offence to provide facilities for gambling without an operating licence, and it is immaterial whether those facilities are provided by remote communication, or inside or outside the UK. The Commission states plainly that offering commercial gambling services to consumers in Great Britain without a Commission licence is illegal even where the operator holds a licence in another jurisdiction.
So the honest description of a casino not on GamStop in the UK is not "unregulated" but "unregulated by Britain". It carries a foreign licence, and that licence does a different job.
The scheme's own terms are blunt about the limits of what a GamStop registration achieves. A registration excludes a person from participating operators only, and cannot prevent access to gambling services run by organisations that do not participate. That is why a self-exclusion holds for its full term and then stays in place until the person contacts GamStop to remove it — the term is a commitment, not a switch. Nothing about an offshore site changes that, and no offshore site is a way round it.
The scale is real but smaller than the loudest voices claim. Commission analysis published on 5 November 2026 estimates that among respondents who had gambled online in the past four weeks, 2.5% had engaged with an illegal gambling website, with a further 1.5% doing so in the past 12 months. Across the whole adult population, including people who never gamble, 0.6% had engaged with one in the past four weeks and 94.4% showed no indication of using one at all. Meanwhile 586 illegal gambling websites accessible to GB consumers were identified in September 2026, 4% more than a year earlier.
Those two sets of figures sit awkwardly together, and that awkwardness is the story. Lots of sites, few players relative to the market, and an enforcement machine that removes one and finds two.
The Commission's Own Scoreboard
If one number deserves to anchor this topic, it is the disruption count, because it comes from the regulator rather than from an affiliate's marketing department.
The Commission's Illegal Markets team reported that since April 2024 it issued 3,140 cease and desist and disruption notices, comprising 2,032 cease and desist notices, 774 registrar referrals, 402 host referrals and 3 payment provider referrals. Over the same period it referred 447,778 Bing and Google URLs and secured 287,961 URL removals.
The composition matters more than the total. By disruption method, registrar blocks and website suspensions produced the largest average fall in engagement — 91 per cent each — ahead of GEO IP blocking at 60 per cent, Bing removal at 52 per cent, Google removal at 30 per cent and Facebook removal at 8 per cent. Across 160 illegal gambling websites for which traffic data existed, engagement fell by an average of 32 per cent.
The Commission is candid about why. Search-engine removal makes a site harder to find but does not block access. Taking the domain away is what actually empties the room. It is a good illustration of how enforcement really works: not a curtain coming down, but a series of leaky dams, each of which slows the water.
Activity has accelerated sharply. In April to June 2026 the Commission referred 366 websites to search engines and began zero criminal investigations. In July to September 2026 it referred 1,835 websites and issued 546 cease and desist notices. Across April 2025 to March 2026, every quarter recorded 0 or 1 prosecutions commenced — a total of one prosecution, in October to December 2025. Criminal prosecution, in other words, is barely part of the toolkit; disruption and payment blocking are.
Two things temper the arithmetic. The Commission's estimate of total time spent on illegal gambling websites by GB consumers, with a VPN adjustment, was 306 million minutes in January 2025, falling to 116 million minutes in June 2025 and rising again to 152 million minutes in July 2025. Enforcement bends the curve; it does not break it. And reporting payment transaction data to the Visa Operator Scheme is described by the Commission itself as a critical and still early-stage part of its financial disruption strategy. Early-stage, in regulator language, means unfinished.
Licensed Sites Set the Bar
Every judgement about an offshore operator needs a fixed point, and in Britain that fixed point is the licensed one. The Commission's data covering June to September 2024 records 44.2 million withdrawals by customers of large online operators; 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours and 0.1 per cent took up to 48 hours. Earlier data from some of the largest firms showed around 99 per cent of withdrawal requests approved, processed and fulfilled within 24 to 48 hours.
Flattering, and familiar to anyone who has watched a withdrawal disappear into the system. The Commission's Contact Centre has repeatedly found that withdrawal problems are the number one topic raised by consumers, and by July 2024 it was still receiving around 2,000 complaints a year about withdrawal delays. Complaints coded "Withdrawals and/or financial transactions" fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025 — improving, and nowhere near zero.
Consumer sentiment is more cautious than the operator data. Research on trust published in July 2026 found 49 per cent of people who had gambled in the past 12 months agreed that "it is quick and easy to withdraw and collect my winnings", against 18 per cent who disagreed.
The same sources name the tricks that build delay into a licence. LCCP licence condition 17.1.1 says a customer's request to withdraw funds must not trigger a demand for information the licensee could reasonably have requested earlier — unless another legal obligation, such as an anti-money-laundering rule, requires it at that moment. Reverse withdrawals were banned outright from 31 October 2021: once a withdrawal is requested, the customer must not be given the option to deposit those funds again.
And the Commission does not only lecture. On 21 October 2026 it announced that one licensee, which runs seven websites, would pay £900,000 in a regulatory settlement for failures including unnecessarily delaying consumer withdrawals — among them a term allowing only one withdrawal at a time, found unfair under the Consumer Rights Act 2015, and manual review of every fifth or tenth withdrawal that produced fresh information demands before payouts were processed.
That is the standard. It is imperfect and it is enforced.
How Offshore Sites Compare
The following compares the categories on regulatory value rather than brand. It is the only sensible way to do it, since the whole difference between them is the paperwork, not the interface.
| Criterion | UKGC-licensed site | Offshore site under a foreign licence | Offshore site with no verifiable licence |
|---|---|---|---|
| Licence in force | Commission licence; operator must participate in GamStop since 31 March 2020 | Foreign licence only; GamStop participation not required | none shown, or a legacy seal no longer valid |
| GamStop block | applies — whole customer base checked at least every 24 hours since April 2020 | does not apply | does not apply |
| Bonus wagering | capped at 10 times bonus funds from 19 January 2026; mixed-product promotions banned | not capped; 25x to 50x commonly described in trade coverage [unconfirmed] | whatever the terms say, if they say anything |
| Maximum cashout | prohibited on deposit balance; CMA undertakings bar maximum limits | common — one operator caps bonus winnings at 300% of the bonus credited | common and often lower |
| Withdrawal friction | condition 17.1.1 bars late information demands; 96.3% of large-operator withdrawals cleared automatically in June to September 2024 | no such condition | no such condition |
| Complaint route | free ADR within eight weeks, via a Commission-approved provider | foreign ADR named in terms, if any | none meaningful |
| Funds on insolvency | disclosure required of one of three protection ratings | varies, disclosure not mandatory | unstated |
| Regulator's reach | licence suspension, financial penalty | none | none |
Read the third column slowly. A legacy seal is now a trap rather than a badge: the Curaçao Gaming Authority says the old "orange" sub-licence certificates of operation ended on 15 October 2025, that licensing activities ceased for the four former master licensors between 18 August 2024 and 31 January 2025, and that a historic /JAZ number must not be treated as independent proof that an operator currently holds a valid licence. Plenty of sites still display the old seal because it looks reassuring and costs nothing.
The Paperwork That Decides Everything
If a casino not on GamStop in the UK disappoints a player, it is nearly always at identity verification. That is where the money stops, and it is treated far too casually on both sides of the argument.
First time round, the process differs by where the site is licensed. A British site must obtain and verify a customer's name, address and date of birth before that customer is permitted to gamble, under Licence Condition 17, in force since 7 May 2019, and must tell customers before the first deposit what documents or information might be needed. The anti-money-laundering Regulations set a €2,000 trigger in remote casinos — identification and verification when a customer deposits, or withdraws funds or winnings, amounting to €2,000 or more, counting linked transactions and cumulative activity within a single logged-on period. Some remote casinos use what the Commission calls a hybrid approach: identify at registration, defer full verification to the threshold. Electronic checks against credit reference agencies and the electoral roll often mean no documents at all.
Later, the same customer may meet a demand that feels new but is routine. Checks are ongoing and may be refreshed when circumstances change. Enhanced due diligence applies to higher-risk accounts, and source of wealth may be required. What is not permitted is the ambush: a withdrawal request must not generate an information demand the operator could reasonably have made earlier. Over a quarter of complaints reaching the Commission's Contact Centre concern identity verification, a figure that tells you how often the theory and the practice part company.
Offshore, none of that framework applies. There is no statutory trigger, no bar on late demands, and no British regulator to say a demand was unreasonable. That is why the warning signs concentrate here: documents requested for the first time at the withdrawal stage; a demand for a selfie, or for bank statements, that arrives with no explanation; a change to the terms after play has begun; a maximum cashout clause discovered at the end of a bonus; and a background in which the operator's own licence registers as expired, suspended or unverifiable. I do not think a player should have to become an investigator. The point is that in this market, they do.
Five Signs An Operator Can Be Trusted
Trustworthiness in this niche is checkable. None of these tests requires an account, a deposit or a belief in anyone's marketing copy.
The licence checks out on the regulator's own register
A licence claim is worth exactly what the issuing authority's register says. The Curaçao Gaming Authority requires a Certificate of Operation Seal to redirect to its verification page and warns that if the certificate behind the seal shows a different domain from the one being accessed, the site is displaying another operator's certificate and should be considered unauthorised or fraudulent. Kahnawà:ke runs a Logo Certificate Program that generates a Certificate of Good Standing for a valid permit. Anjouan says its certificates carry a unique number and a QR code linking to a public register, and that a certificate that cannot be verified there should not be relied upon.
The quick check: click the seal, follow where it goes, and confirm the domain name matches the one in your browser. Two minutes, and it eliminates a large share of the field.
Funds are described honestly, and payouts are rapid
British guidance requires an operator holding customer funds to state clearly which of three protection ratings applies — not protected, medium protection or high protection — and an operator rated "not protected" must remind the customer every six months that funds are not protected in the event of insolvency. Offshore, that disclosure is optional, which makes it informative when it appears anyway.
The quick check: read the insolvency disclosure, then read the withdrawal section for processing times stated in hours rather than "once verified". The Commission's own position is that where it has no regulatory concerns about a customer there is no valid reason to delay a payout.
Bonus terms fit on one screen
For a British licence, wagering requirements on bonus funds are capped at ten times from 19 January 2026, and the Commission chose the cap over an outright ban partly because leaving it open would have led licensees to introduce terms preventing customers cashing out bonuses. Kahnawà:ke rules require a licensee's terms to be contractual and free of conditions that are unfair or unreasonable.
The quick check: count the clauses. A bonus whose conditions need a second page and a working knowledge of contribution weightings is not generous, it is a wager on the customer not reading it.
Complaints go somewhere independent
A British licence requires arrangements for a customer to refer a dispute free of charge to an alternative dispute resolution provider if it is unresolved after eight weeks; eCOGRA's report for 1 October 2024 to 30 September 2025 records an average of 31 days to resolve domestic disputes, and IBAS's report for 2024-25 records 20 days with 100 per cent operator compliance with decisions in the consumer's favour across two years.
The quick check: search the terms for a named ADR provider and a stated time limit for escalating. "Contact support" is not a dispute route. A named provider is.
The site does not chase people who have excluded themselves
The Commission issued an industry warning notice on 20 January 2025 about casino games supplied by licensed operators appearing on unlicensed websites available to GB consumers, noting that such sites often target customers who have self-excluded via GamStop. That is the clearest signal in the whole file. A site that treats excluded customers as a market is telling you what it thinks of its customers generally.
The quick check: look at how the site describes GamStop. A reputable offshore operator says its licence does not include it. The other kind presents itself as the workaround, which is a statement of intent about everything else it does too.
Seven Steps Before Trusting One With Money
The following is about reading a site, not about signing up to one. I would run these in order.
- Verify the licence on the issuing authority's register, not the site's own badge. Every regulator worth the name publishes a register, and clicking through the seal takes a minute. This is the single check that invalidates the rest if it fails — a legacy Curaçao seal, an expired certificate or a mismatched domain ends the exercise.
- Read the withdrawal clause before the bonus clause. Processing times, any limit on the number or size of withdrawals, and any fee should be stated in plain words. A site that is vague about the exit and specific about the entrance is telling you which direction the money flows.
- Work out what the wagering requirement attaches to. Bonus only, or bonus plus deposit? Ignition states that casino bonus amounts carry a 25x requirement and gives a contribution chart on which slots count 100 per cent while roulette and baccarat count 5 per cent and live dealer games count zero. The multiple is the small number; the contribution table is the large one.
- Hunt for a maximum cashout clause. BlueChip Casino reserves the right to limit winnings generated with bonus funds to 300 per cent of the bonus credited, with any excess voided. In the UK a term like that would be offside — guidance bars any maximum limit on withdrawing your deposit balance — but offshore it is ordinary, and it is the clause that turns a spectacular win into a modest one.
- Find the maximum bet allowed while wagering. Ignition caps the casino maximum bet per wager at 20 per cent of the deposited amount and says breaches may result in account closure, forfeit of the bonus and forfeit of any winnings generated. A £5 spin on a £20 deposit is not a small slip; it is the whole bonus.
- Check what happens to your funds if the operator fails. British operators must disclose one of three protection ratings, and an operator rated "not protected" has to remind customers of it every six months. Offshore, look for the same statement. Its absence is the answer.
- Identify the dispute route before you need it. Anjouan requires licensees to name an approved ADR provider and its contact details in player-facing terms, with complaints resolved within 30 days before escalation. If a site names nobody, the practical remedy is a chargeback through your card issuer or bank, and the odds there depend on how the payment was classified.
The pattern is consistent. Every step costs the operator something to reveal, which is exactly why so many of them keep the detail in a help page nobody opens.
Blocking, Banks and the Helpline
A self-exclusion is only as strong as the surface it covers, and the gaps are where the practical work sits.
Bank gambling blocks are the most widely available layer and the most misunderstood. The Commission's list of banks offering a gambling blocking service, last updated 16 October 2026, names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling. The blocks decline payments to merchants categorised under gambling Merchant Category Codes and cover online casinos, betting websites, gaming apps and physical venues. They are applied at card level, so each card must be activated separately, and most banks use a 48-hour or 72-hour cooling-off period before gambling transactions are permitted again after a block is switched off. They do not affect a credit score.
Blocking software goes further and costs money. GamStop signposts Gamban and BetBlocker. BetBlocker is a non-profit that states it blocks over 1,368,000 gambling websites and 3,100 apps, requires no registration and is free worldwide. Gamban blocks licensed and unlicensed sites and is designed to be as difficult to remove as possible, but the TalkBanStop free UK licence scheme ended on 31 March 2026: Gamban is free for residents of Wales and costs £4.99 a month or £29.99 a year in England and Scotland after a seven-day free trial. That is worth knowing, because the software that covers offshore sites best is now the one you pay for.
The site-level facts are worth repeating because they are so often stated wrongly. A block registered with GamStop Online lasts six months, one year, five years or five years with auto-renewal, can take up to 24 hours to become effective, cannot be cancelled during the term, and remains in place after the term ends unless the person contacts GamStop to remove it. Registrations were 117,756 during 2025, and the register stood at 614,738 consumers as of July 2026, of whom more than one in two had chosen the five-year option.
Where to get help, plainly. The National Gambling Helpline is operated by GamCare, free of charge, on 0808 8020 133, 24 hours a day every day of the year; callers in Wales have a dedicated number, 0808 2819 265. Gamblers Anonymous England, Wales and Ulster can be reached on 0330 094 0322 and runs around 250 meeting locations with no appointment needed. Citizens Advice offers free confidential help including debt advice, and Citizens Advice Scotland runs a gambling support line on 0800 328 1131, Monday to Friday, 10am to 3pm. The NHS National Gambling Clinic accepts self-referrals, and NHS England had opened 15 specialist gambling clinics across England since 2019.
None of that depends on which licence a website holds.
Questions People Commonly Ask
Any UK casinos not on GamStop are what, exactly?
They are offshore operators, not British ones. A site holding a Gambling Commission licence must participate in GamStop as a condition of that licence, so no licensed British casino can be outside the scheme. Anything described as a UK casino not on GamStop is either an offshore site marketed to British players, or an unlicensed operator. There is no third category, whatever the badge in the footer says.
Are UK online casinos not on GamStop legal to use?
Offering gambling facilities to consumers in Great Britain without a Commission licence is an offence under section 33 of the Gambling Act 2005 — that liability falls on the operator, not the customer. The practical consequence for a player is not prosecution but exposure: no licence to complain to, no British ADR, no customer-funds disclosure, and no recourse when terms are enforced against them.
What are the best payout casinos not on GamStop, by the numbers?
Payout speed offshore is a promise, not a measurement. The only hard figures on withdrawals come from the British side: 44.2 million withdrawals by customers of large online operators in June to September 2024, of which 96.3 per cent cleared automatically. Much of a payment's total time sits with the bank or the crypto network, not the casino. Check the stated processing time and who pays the network fee.
Do new UK casinos not on GamStop offer free spins with no deposit?
Often, and the terms are where the value is decided. No-deposit offers usually carry the harshest conditions, because the operator has risked nothing. Typical offshore multipliers for ID verification are the sticking point: outside Britain the wagering cap of ten times does not apply, maximum cashout clauses are routine, and consecutive no-deposit bonuses are frequently barred. Read the cashout cap before the spin count.
Can a casino not on GamStop UK players use simply ignore a self-exclusion?
It cannot override one. A GamStop registration covers participating operators, and the Commission's rules for licensed operators require them to check their entire customer base against the register at least every 24 hours. An offshore site is not connected to the scheme, so it would not see the block. The exclusion itself still holds for its full term and until the person contacts GamStop to remove it — a site ignoring it changes nothing about that.
Do UK licensed casinos not on GamStop exist at all?
No. Since 31 March 2020 every online operator has had to be part of GamStop as a condition of its Commission licence, and two operators had their licences suspended in April 2020 for failing to integrate in time. A site advertising itself as British-licensed and outside the scheme is misdescribing at least one of those two facts, and probably the licence.
How do all-British casino statistics treat the outside market?
Badly, if read carelessly. The Commission's industry figures cover the licensed market: £17.5 billion in gross gambling yield for April 2025 to March 2026, of which remote casino, betting and bingo accounted for £8.3 billion. Estimates of the unlicensed share come from elsewhere and disagree widely, so figures staked on offshore sites should be treated as informed guesses with a methodology attached, not as measurements.
What the Regulator Is Actually Doing
The Commission cannot licence the offshore market away, so it does something narrower and more interesting: it makes unlicensed sites expensive to run. Take the domain, block the geolocation, report the transactions to the card schemes, and let the arithmetic do the rest — since April 2024, 287,961 URLs removed, registrar blocks cutting engagement by an average of 91 per cent, and 1,835 websites referred to search engines in a single quarter. It is a war of attrition fought over hosting and payment rails, and the Commission keeps publishing the scoreboard.
What it does not do is protect anyone who chooses an offshore site. Criminal investigations in the year to March 2026 amounted to one prosecution.
So the sensible position on a casino not on GamStop is neither moral panic nor enthusiasm. The withdrawals really do clear, the wagers really are capped, the ADR provider really does decide within weeks, and none of it reaches across the border — and if it goes wrong, the National Gambling Helpline is still on 0808 8020 133, which is more than an unlicensed site will ever offer.