Gambling Not on GamStop and Regulator Enforcement

Gambling not on GamStop means an operator holding no Gambling Commission licence, so a GamStop exclusion cannot reach it. As of July 2026 GamStop Online reported 614,738 people currently on the register, yet the Commission identified 586 illegal sites in September 2026 alone. Nothing blocks an unlicensed site except enforcement.

I have covered this trade long enough to know that the phrase "not on GamStop" is doing two jobs at once, and only one of them is honest. As a description it is accurate: a site without a Gambling Commission licence is not connected to the national self-exclusion scheme, and the scheme's obligations bind only GB-licensed operators. As a sales pitch it is grubby, because the entire point of the offer is that a block placed by someone in a bad moment can be sidestepped. The regulator's answer has never been to argue the point. It has been to make the sites harder to find, harder to pay for and harder to host — and in 2026 it is doing that at a volume that surprises even people who watch the numbers for a living.

So this page takes the phrase at face value and looks at what sits behind it: who licenses these operators, what the licence actually guarantees, where the money comes in and out, and how the enforcement machine is performing. One thing up front, plainly. Offshore sites are not licensed in Great Britain. UK protections — the fair-terms rules, the withdrawal conditions, the deposit limits, the ADR route — do not apply. Anyone who wants help rather than a workaround should start with the National Gambling Helpline on 0808 8020 133, free and open 24 hours a day, or GamCare, which runs it.

The Register Nobody Offshores Around

GamStop's growth is the backdrop to every question about gambling sites not on GamStop UK players ask about. The scheme recorded 117,756 new registrations during 2025 and had 561,983 active exclusions at the end of that year. By 16 July 2026 GamStop Online reported 614,738 people currently on the register, with more than one in two having chosen the maximum five-year term.

One small fact about the name first, since it comes up constantly: the scheme is often typed "gamestop", because the word "game" suggests itself, and it is always written GamStop.

The checkable benchmark worth holding on to comes from the regulator itself. Since April 2024 the Commission's Illegal Markets team has issued 3,140 cease and desist and disruption notices — 2,032 C&Ds, 774 registrar referrals, 402 host referrals and 3 payment provider referrals — while referring 447,778 Bing and Google URLs and securing 287,961 URL removals, according to figures published on 21 October 2025. Measured across 160 illegal gambling websites where traffic data existed, engagement fell by an average of 32 per cent after disruption.

The quarterly series shows the pressure rising rather than easing. Sites referred to search engines went from 124 in July to September 2024 to 321 in April to June 2025, and by the quarter July to September 2026 the Commission referred 1,835 websites and 7,677,211 URLs while issuing 546 cease and desist notices. There is a sting in that sequence. Criminal investigations commenced in April to June 2026: zero. Across the full year April 2025 to March 2026 every quarter recorded nought or one prosecution commenced — one, in October to December 2025. Disruption, in other words, is administrative work, not policing.

What the Licence Is Actually For

The British-licensed market sets the comparison, so it is worth being precise about what the licence buys. It buys the LCCP, and the LCCP is where the player protections live: licence condition 7.1.1 on fair terms, condition 17.1.1 on identity checks, the ban on reverse withdrawals under RTS 14B since 31 October 2021, the ten-times cap on wagering requirements in force since 19 January 2026, and the requirement since 31 October 2025 that customers be prompted to set a financial limit before their first deposit.

Compare that with the good offshore operators, which are not lawless so much as differently governed. Curaçao's National Ordinance on Games of Chance took effect on 24 December 2024, replacing the old master-licence model with direct supervision by the Curaçao Gaming Authority. The legacy "orange" sub-licence certificates ended on 15 October 2025. Anjouan issues B2C licences for EUR 17,828 a year and states that its licences carry no territorial restrictions, while adding that holders must comply with local law wherever they operate — a sentence that quietly concedes the whole argument. Kahnawà:ke has regulated interactive gaming since 1999, requires licensees to be hosted at a specific data centre, and runs a logo certificate programme that generates a Certificate of Good Standing.

Then the bad ones, where the paperwork is thin or invented. Costa Rica operates no comprehensive gambling licensing regime at all; the "data processing license" beloved of marketing copy is not a licence in the legal sense, and a bill that would have created one was rejected in early 2026. An ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around EUR 17,000 each per year, and that Comoros financial intelligence officials described Anjouan Corporate Services as operating illegally [unconfirmed — trade and press reporting rather than a primary regulator page].

And the terms that build in delay, which are the tell I trust most. Offshore bonus conditions routinely cap what a bonus-derived win is worth: one operator's published terms reserve the right to limit withdrawals from winnings generated with bonus funds to 300 per cent of the credited bonus amount, voiding the excess. Another caps bets while wagering at €5 for regular players and rejects anything above. Welcome-bonus wagering multipliers offshore typically run at 35× to 50×, and no-deposit bonuses at 40× to 60× with a cashout cap, per a 2026 comparison table [unconfirmed]. None of that is illegal where it is written. All of it is the reason the UK cap exists.

The Licence Check, Side by Side

The two columns are not symmetrical and no table can make them so. Note the last row: the Curaçao annual B2C fee is EUR 47,450, made up of a EUR 24,490 licence fee to the National Treasury and a EUR 22,960 supervisory fee. That is a real, staffed regime with a real fee. It is simply not the same regime, and it does not follow the player to Wales, Scotland or England.

Welsh Gambling Sites Not on GamStop

The question of welsh gambling sites not on GamStop deserves its own answer because the geography is a red herring. A licence is granted by a regulator, not by a nation, and GamStop Online blocks gambling with every operator licensed in Great Britain — which is one market, not three. There is no Welsh licence and no Welsh exemption.

What does differ is the practical help. For callers in Wales the National Gambling Helpline number is 0808 2819 265, alongside 0808 8020 133 for England and Scotland. Support is also available in Welsh from the same services, and Citizens Advice Scotland runs a separate gambling support line on 0800 328 1131 for debt, housing, work and relationship problems linked to gambling, open Monday to Friday, 10am to 3pm.

One other UK-specific detail that gets lost in the offshore conversation: self-exclusion in Great Britain is not only online. Land-based casinos use SENSE, with a minimum six-month period extendable to twelve, and removal can only be requested in person at a casino during the six-month "Thinking" period, followed by a 24-hour cooling-off. Gamstop Betting Shops, formerly MOSES, is telephone-based on 0800 294 2060, works with over 60 operators and covers roughly 6,000 shops, with a fixed 12-month term that cannot be ended early. The Commission's May 2026 FOI response put active self-excluded customers at 12,445 for SENSE and 9,075 for MOSES between 1 April 2025 and 1 April 2026.

The Exclusion Term and How It Works

This topic turns on one thing, and it is not the licence. It is the exclusion term itself, and how badly people understand it.

The first time, registration is simple. GamStop offers terms of 6 months, 1 year, 5 years, or 5 years with auto-renewal; signing up takes a few minutes, though it can take up to 24 hours for the block to become effective. There is no cancellation during the term. Under the terms of use, last updated 20 May 2026, the auto-renewal option may only be switched off during the final six months of a five-year Minimum Exclusion Period, and auto-renewal continues for up to four further five-year periods. GamStop's 2025 annual report devotes a section to its refusal to remove registrations before the chosen term ends.

What surprises people is what happens next. If nothing is deactivated after the chosen period, GamStop holds the data through a further automatic seven-year self-exclusion period during which operators are told the person was previously excluded. That is why the Group says it can no longer report a lifetime registration total: the seven-year retention clock from the 2018 launch has begun to expire. And the 2025 selection pattern shows how many people understood the stakes — 29 per cent chose six months, 24 per cent a year, 25 per cent five years and 22 per cent auto-renewal, with under-25s accounting for nearly one in three of all exclusions in the first half of 2026, a 26 per cent year-on-year rise.

The warning signs, then. If anyone describes a site as a way round a block, that is the sign — the term holds for its full length and then stays in place until the person contacts GamStop to remove it, and no operator can shorten it. If a site's terms say "we may" rather than "we will" about paying winners, that is the second sign; the Commission's guidance says such sole-discretion terms are unfair under the Consumer Rights Act 2015. The third is a check that arrives only at withdrawal. The Commission's own blog of 12 August 2026 reported that over a quarter of complaints reaching its Contact Centre concern identity verification, raised when documents are requested only on attempting to withdraw.

Five Signs an Operator Can Be Checked Out

The licence is on the Commission's public register

Look the business up on the Gambling Commission's public register and confirm that the activities and the domain names match what you are looking at. The Commission advises checking before gambling, and it says plainly that it is illegal to offer commercial gambling services to consumers in Great Britain without a Commission licence — including where the operator holds a licence somewhere else.

The seal leads somewhere real

A Curaçao Certificate of Operation Seal must redirect to cert.cga.cw, and only B2C operators get one, only for an approved player-facing domain. If the certificate behind the seal carries a different domain from the site being visited, that site is displaying somebody else's certificate and should be treated as unauthorised or fraudulent. A historic /JAZ number is not proof of a current licence.

The terms name a maximum withdrawal

A term limiting what can be taken out is the clearest red flag in the paperwork. The Commission's example of a prohibited UK term is "You may withdraw up to £50 per day and up to £500 per week", and operators may not impose a maximum limit on withdrawals from a deposit balance at all. Where no maximum is stated, check instead for a maximum bet while wagering and a cashout cap on bonus winnings.

Complaints go to a named ADR, free

Licensed operators must let customers refer an unresolved dispute to an approved ADR entity free of charge, after eight weeks or a deadlock letter. In Great Britain the approved list includes IBAS and eCOGRA, and IBAS has reported 100 per cent operator compliance with decisions in the consumer's favour in both 2023-24 and 2024-25. Anjouan requires a designated ADR and expects complaints resolved within 30 days. A site that offers no route at all is telling you something.

Deposits do not come off a credit card

Credit card gambling has been banned for UK-licensed remote gambling since 14 April 2020, and operators must also ensure e-wallet money was not loaded from a card. Bank gambling blocks add a second layer: the Commission's list, last updated 16 October 2026, names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling. Most use a 48-hour or 72-hour cooling-off before gambling transactions are allowed again, and switching one on does not affect a credit score.

How to Check a Site Before Anything Else

1. Read the licence claim, then verify it. Find the regulator named in the footer and check the claim on that regulator's own register, matching the domain exactly. Marketing copy is not evidence; a register entry is.
2. Check the seal by clicking it. Follow the certificate through to the regulator's verification page and compare the domain shown there with the one in the address bar. A mismatch means the site is not authorised.
3. Confirm the exclusion position in writing. GamStop Online blocks GB-licensed operators only and can only exclude from participating operators. If a site is not licensed in Great Britain, assume the block does not reach it, however the site phrases things.
4. Read the withdrawal and bonus terms before depositing. Look for a maximum withdrawal, a maximum bet while wagering, a cashout cap, and the wagering multiplier. The UK cap is ten times; a 40× multiplier offshore takes four times as much play.
5. Set the limits the account allows, and use a bank block. Financial limits must be prompted before a first deposit on UK-licensed sites, and prompt-and-review reminders come every six months. On offshore sites, the card-level bank block is often the only limit that actually holds.
6. Establish where a complaint would go. Check the ADR or dispute route named in the terms, whether it is free, and whether the operator has published past decisions. If there is no route, or the route is the operator's own discretion, stop there.

Where the Regulator's Attention Is Going

The site angle on this whole subject is enforcement, and the 2026 numbers say the regulator has largely given up on the criminal route. The methodology is disruption: registrar blocks and website suspensions produced the largest average fall in engagement, 91 per cent each, ahead of GEO IP blocking at 60 per cent, Bing removal at 52 per cent, Google removal at 30 per cent and Facebook removal at 8 per cent. The Commission itself notes that search-engine removal makes a site harder to find without blocking access, which is the honest admission inside an otherwise positive report.

Payments are the newer front. The Commission made its first referral to Visa in January 2025 following a test purchase on an unlicensed website and has since made three more covering three separate sites, and it calls reporting transaction data to the Visa Operator Scheme a critical and still early-stage part of the strategy. There is also a warning notice worth reading: on 20 January 2025 the Commission told the industry that casino games supplied by licensed operators were appearing on unlicensed websites, and noted that such sites often target customers who have self-excluded via GamStop.

The scale argument is where the trade press and the regulator part company, and I would treat every figure here as contested. H2 Gambling Capital estimated stakes with illegal operators in the UK reached £16.6 billion in 2025, up from about £5 billion in 2019, with the legal share falling from 97 per cent to 92 per cent. Frontier Economics, for the Betting and Gaming Council, conservatively estimated £2.7 billion staked annually online on the black market, involving 1.5 million Brits. Yield Sec, for the Campaign for Fairer Gambling, put the 2025 market split at 91 per cent regulated and 9 per cent unregulated. The Commission's own survey evidence published 5 November 2026 is far smaller: among respondents who had gambled online in the past four weeks, an estimated 2.5 per cent had engaged with illegal gambling websites, with a further 1.5 per cent in the past twelve months. Whoever is right, the direction of travel is the one that matters, and it is not reassuring.

Questions About Gambling Not on GamStop

What gambling sites are not on GamStop?

Any operator without a Gambling Commission licence — including those holding a Curaçao, Anjouan or Kahnawà:ke licence, and some holding no meaningful licence at all. The scheme's obligations bind participating operators only, so a site outside the GB licensing regime is outside GamStop by definition. The Commission identified 586 illegal gambling websites accessible to GB consumers in September 2026.

Are gambling apps not on GamStop safer than websites?

No. The app is a shopfront, not a jurisdiction; the licence behind it decides everything. An app from a GB-licensed operator carries the LCCP obligations and the GamStop check, and an app from an unlicensed one carries neither. BetBlocker states it blocks over 3,100 apps as well as more than 1,368,000 websites, which is a useful reminder that apps are a distribution channel, not a protection.

Does a UK self-exclusion still hold at an offshore site?

The term itself does not weaken: GamStop runs for its full chosen period — 6 months, 1 year or 5 years — and then stays in place until the person contacts GamStop to remove it. What changes is who honours it. GamStop Online can only exclude from participating operators, so an unlicensed site simply is not checking. The block is intact; the coverage is not.

Can I withdraw my deposit if a site is not on GamStop?

That depends entirely on the operator's terms, because no British rule applies. LCCP licence condition 17.1.1 stops UK-licensed operators demanding extra information at withdrawal that they could reasonably have requested earlier, and UK guidance bars any maximum limit on withdrawing a deposit balance. Offshore, a cashout cap on bonus winnings — one operator's terms allow 300 per cent of the bonus credited — can be perfectly lawful.

Which regulator covers the sites that are not on GamStop?

Several, with very different depth. Curaçao has been under direct CGA licensing since 24 December 2024, with a EUR 47,450 annual B2C fee. Anjouan charges EUR 17,828 a year and says its licences carry no territorial restrictions. Kahnawà:ke requires hosting at a specific data centre and runs a logo verification programme. Costa Rica operates no comprehensive regime at all, and the "data processing license" quoted in industry marketing is not a licence in the legal sense.

Are the good ones still a bad idea?

I would put it more precisely than that. The operators worth anything at all do segregate player funds, certify their random number generators and publish a dispute route — Anjouan's standards require the first two, and it names EGIS ADR, Axion ADR, iGaming ADR and other approved ADR providers. But none of that is portable, and none of it survives the operator's own commercial interests on a bad day. A licence you can complain about is worth more than a licence you cannot.

What the Numbers Say About the Gap

The gap between the two Gambling Commission datasets is the whole story, and it is narrower than the sales patter suggests. On 5 November 2026 the regulator published two figures side by side: 0.6 per cent of the whole adult population had engaged with an illegal gambling website in the past four weeks, and 2.5 per cent of those who had gambled online in the same period had done so — yet across the full four-week window, with the largest enforcement push in the scheme's history running, 586 illegal sites were still reachable from Great Britain. Meanwhile 614,738 people were on a register that reaches only the licensed half of the market. If you want help rather than a workaround, the National Gambling Helpline is on 0808 8020 133, free, 24 hours a day, every day of the year — and it does not care which licence the site held.