New Casinos Not on GamStop and the Sites the Regulator Is Chasing

New casinos not on GamStop are offshore operators with no Gambling Commission licence, so they sit outside the scheme that blocks self-excluded players from British-licensed sites. They are not licensed in Great Britain, UK consumer protections do not apply to them, and the regulator treats them as illegal operators rather than an alternative market.

The "new" part of that phrase deserves suspicion before anything else. A fresh brand is easy to build and cheap to abandon: a domain, a white-label platform, a licence bought from a small island authority, and a launch bonus with a wagering requirement nobody would sign off on in Britain. What a new offshore site actually is, in regulatory terms, is an operator serving British customers without a licence from the Gambling Commission — and the Commission's own position, published on 21 October 2024, is that this is illegal, whether or not the firm holds a licence somewhere else.

The scheme itself has a naming quirk worth clearing up straight away. It is often typed "gamestop", but the scheme is GamStop, run by The National Online Self Exclusion Scheme Limited, and it works only against companies licensed in Great Britain. Since 31 March 2020 every online operator has had to be part of GamStop as a condition of its licence, under social responsibility code provision 3.5.5 of the Licence Conditions and Codes of Practice. An offshore site is not in that scheme, not covered by it, and not obliged to care.

That is the whole subject in one line, and the rest of this page is what the numbers say about it. I have covered this trade long enough to be sceptical of both sides of the argument: the offshore sites that present themselves as freedom, and the licensed industry that presents every unlicensed operator as a predator. The evidence is messier than either claim, and more interesting. As of 13.11.2026, the data points one way — the regulator is disrupting far more sites than it was, and prosecuting almost nobody.

What the regulator actually does about unlicensed sites

This is where the site angle bites, because the enforcement record is the only hard evidence about how these operations are treated. The Commission's Illegal Markets team does not arrest anyone. It sends letters, asks registrars to pull domains, asks hosts to suspend sites and asks search engines to de-index them, then measures whether traffic falls.

Since April 2024 it has issued 3,140 cease and desist and disruption notices — 2,032 cease and desist notices, 774 registrar referrals, 402 host referrals and 3 payment provider referrals — referred 447,778 Bing and Google URLs and secured 287,961 removals. Across 160 illegal gambling websites with usable traffic data, engagement fell by an average of 32 per cent after action.

The direction of travel in 2026 is steep. In April to June 2026 the Commission referred 366 websites to search engines, covering 147,721 URLs. In July to September 2026 it referred 1,835 websites and 7,677,211 URLs, and issued 546 cease and desist notices. And across April 2025 to March 2026, every quarter recorded 0 or 1 prosecutions commenced — a single prosecution in the whole year, in October to December 2025. A careful reader should notice what that combination means: enormous administrative pressure, almost no criminal process.

Which disruption methods actually work

The Commission's own figures rank the methods, and the ranking is not the one the headlines imply.

That table is the most useful thing the Commission has published on this subject, and it explains the strange arithmetic of the market. De-indexing makes a site harder to find; it does not stop anyone who already has the address, which is why the average fall from a Google removal is 30 per cent rather than something closer to total. Registrar blocks and suspensions do stop access, at 91 per cent each, but they are measured across very few domains. The Commission says as much itself: GEO IP blocking and registrar blocks are more effective than search-engine removals.

How big the illegal market is — and how little we know

Estimates of the unlicensed market are a battlefield of methodology, and I would treat most of the round numbers with caution. The Commission's own survey analysis, published on 5 November 2026, puts it small: across the whole population including non-gamblers, 0.6 per cent of respondents had engaged with an illegal gambling website in the past four weeks and a further 0.4 per cent in the past twelve months, while 94.4 per cent showed no indication of using one. Among people who had gambled online in the past four weeks, 2.5 per cent had engaged with an illegal site, with another 1.5 per cent in the past year.

Industry-commissioned work is much larger. H2 Gambling Capital estimates £16.6 billion was staked with illegal operators in the UK in 2025, up from about £5 billion in 2019, with the legal share of gambling falling from 97 per cent to 92 per cent. Frontier Economics, for the Betting and Gaming Council, conservatively put £2.7 billion staked annually online on the black market, equal to 2.1 per cent of the £128 billion staked with GB-regulated remote casino, betting and bingo operators. Yield Sec, working for the Campaign for Fairer Gambling, put the 2025 online market at £8.8 billion gross gaming revenue, split 91 per cent regulated and 9 per cent unregulated.

Three estimates, three different questions. The Commission counts people; H2 counts money staked, and stakes are not losses; Yield Sec counts revenue. The Commission's own methodology acknowledges a hole underneath all of them — it does not capture activity hidden by VPNs. So the honest position is that nobody knows the size of this market, and anyone quoting a single confident figure is selling something.

Where the money is being chased instead

The more interesting 2026 development is financial, not legal. The Commission made its first referral to Visa in January 2025 after a test purchase on an unlicensed site, and has since made three more covering three separate unlicensed websites. It describes reporting payment transaction data to the Visa Operator Scheme as a critical and still early-stage part of its strategy — which reads to me like an admission that the money flow, not the website, is the real target.

The Illegal Gambling Taskforce's terms of reference, published by DCMS on 13 May 2026, put payments first among three priorities: reducing payments to and from illegal operators, tackling online advertising of illegal gambling, and improving cross-agency enforcement. It runs for twelve months and meets at least twice a year.

The Licence and How These Sites Use It

Everything about an unlicensed casino comes back to its licence, and the type of licence tells you almost everything else. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and on summary conviction that carries up to 51 weeks' imprisonment, a fine at level 5, or both — six months in Scotland. The section applies to remote gambling if any piece of the remote gambling equipment is in Great Britain, and, under wording amended in 2014, also where the provider knows or should know the facilities will be used in Great Britain. The Commission's plain summary, from October 2024, is that an operator cannot make itself lawful here by holding a licence in another jurisdiction.

So what are these new sites licensed by? Mostly three authorities, with three very different levels of substance.

Curaçao and Its Reformed Licence Regime

Curaçao is the most common home for these brands, and it is mid-reform. The National Ordinance on Games of Chance took effect on 24 December 2024, making the Curaçao Gaming Authority the direct licensing and supervisory authority and ending the old master-licence and sub-licence model. The legacy orange sub-licence certificates ended on 15 October 2025, and a historic /JAZ number or legacy seal must not be treated as proof of a current licence. The four former master licensors stopped licensing on these dates: Gaming Curaçao (365/JAZ) on 18 August 2024, Curaçao eGaming (1668/JAZ) on 1 October 2024, a former master licensor (8048/JAZ) on 1 November 2024 and Curaçao Interactive Licensing (5536/JAZ) on 31 January 2025.

The paperwork has a price. A B2C application fee is a one-time non-refundable €4,592, plus €150 per ultimate beneficial owner; the annual B2C cost is €47,450, made up of a €24,490 licence fee to the National Treasury and a €22,960 supervisory fee to the CGA. Supplier licensing becomes fully mandatory from 24 December 2026. If you want a single sense of how crowded this is, a third-party tracker reading the CGA's public register reported 704 Curaçao licences held by 698 operators, of which 552 were active, at 03:30 UTC on 6 November 2026 — a figure from a tracker rather than the CGA itself, and one I would not treat as official.

Anjouan and Its Cheap Seals and Contested Authority

Anjouan, a constituent island of the Union of the Comoros, licenses internet gaming under legislation adopted in 2005. Its fee schedule is stark: €17,828 for B2C licence issuance, one-time, and the same again annually for renewal, with €500 per additional domain or URL. Anjouan Gaming says its licences carry no territorial restrictions under Anjouan law — but adds that holders must comply with the law wherever they operate. It said as much in a statement on 10 June 2026: an Anjouan licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world".

That clarity is not universal. An ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around €17,000 each per year, that Comoros financial intelligence officials described Anjouan Corporate Services as operating illegally, and that a former attorney-general of the Comoros called Anjouan Licensing Services "an illegal entity". Anjouan Gaming says an independent legal opinion dated 19 September 2024, reconfirmed in February 2026 by a law firm regulated in England and Wales and Quebec, confirms the authority is lawful — a claim made by the licensee's own side, so it is reported rather than established.

Kahnawà:ke, Malta and the no-licence cases

Kahnawà:ke has regulated interactive gaming since its Regulations came into force on 8 July 1999, longer than almost anywhere else, and licensed operators must be hosted at a specific data centre in the Mohawk Territory. Its structure is unusual: a single Interactive Gaming Licence, held by one entity at a time and held by Mohawk Internet Technologies since 1999, with Client Provider Authorizations beneath it. Fees rise on 1 January 2027 — the CPA application fee from USD 35,000 to USD 40,000, the five-year renewal from USD 5,000 plus the annual fee to USD 40,000 including it, and Key Person permits from USD 5,000 to USD 6,000.

Malta is the substantial one, and it is not a UK licence either. An MGA B2C licence costs a one-time €5,000 application fee, a fixed annual fee of €25,000, gaming tax at 5 per cent of revenue, and minimum paid-up share capital of €100,000 for Type 1 and Type 2 licences. Malta also publishes a list of Unauthorised URLs, declaring it has no connection with those domains and that any reference to an MGA or Maltese licence on them is false and misleading — the most recent entries carry notice dates of 30 October 2026.

And then there is the bottom of the market. Costa Rica does not operate a comprehensive gambling licensing regime at all; the "data processing license" sometimes cited in the industry is not a licence in the strict legal sense. Costa Rica's Legislative Assembly rejected Bill No. 25,057 in early 2026, which would have introduced a mandatory licensing regime. Under Costa Rican law, games of chance where the outcome depends primarily on luck rather than skill are generally prohibited. When a new casino advertises no licence at all, that is usually where it lives.

Reading a payout promise when there is no licence to appeal to

Rapid payouts are the loudest claim on every new offshore casino, and there is no British rule underneath the claim. That matters more than it sounds. In the licensed market, UK controls carry a floor: the Gambling Commission's data for June to September 2024 records 44.2 million withdrawals by customers of large online operators, of which 96.3 per cent cleared automatically and a further 3.5 per cent within 24 hours. Only 0.1 per cent took up to 48 hours. LCCP licence condition 17.1.1 bars an operator from demanding extra information at withdrawal that it could reasonably have asked for earlier, condition 7.1.1 requires terms to be fair under the Consumer Rights Act 2015, and no term may impose a maximum limit on what a customer can withdraw from their deposit balance. Reverse withdrawals have been banned outright since 31 October 2021 under RTS 14B: consumers must not be given the option to cancel a withdrawal request.

Offshore, none of that applies. The rules that would be the basis of a complaint simply do not exist in the operator's jurisdiction, and no British regulator has jurisdiction over the firm in the first place.

Here is what the payout methods actually do, as a matter of mechanics rather than marketing.

Bitcoin and crypto withdrawals

Bitcoin's protocol targets an average of 10 minutes between blocks, roughly 144 a day, with difficulty re-targeting every 2,016 blocks. That 10 minutes is an average, not a promise: within any 10-minute window the chance of a block being found is about 63 per cent, rising to 95 per cent in 30 minutes and 99.7 per cent in 60. The classic client shows a transaction as unconfirmed until it is six blocks deep, and most exchanges bearing double-spend risk require six or more — so a "crypto payout in minutes" is really a broadcast in minutes, with settlement later. Bitcoin's six-confirmation default is not magic either; it assumes an attacker with under 10 per cent of hashrate and tolerates a residual double-spend risk below 0.1 per cent.

Litecoin is faster in theory and shakier in practice: a 2.5-minute average block interval, first confirmation around 2.5 minutes and six confirmations around 15 minutes — but only about 55.43 per cent of modelled six-confirmation spans actually complete within 15 minutes.

E-wallets and where fees quietly land

E-wallet payouts are the standard offshore route, and the fee sits with the wallet rather than the casino. Skrill charges 2.80 per cent of the amount withdrawn to move money to a bank account, minimum €3.50, effective 12 January 2026, plus a 4.49 per cent foreign-exchange fee where conversion is needed. Neteller charges 2.80 per cent, minimum USD 3.50, for the same transfer, with 12.75 USD for a member wire and 3.49 per cent for withdrawal to Skrill. MiFinity charges 1.8 per cent for cryptocurrency withdrawals and €1 for Visa EEA. Jeton's UK schedule shows local bank transfer withdrawal in 0 to 30 minutes with no sender or receiver fee, and limits of £10 to £10,000. And dormant accounts get charged: Skrill and Neteller both deduct a monthly service fee of €5.00 and USD 5.00 respectively once an account goes six months unused, and MiFinity charges €1 a month after twelve months without login.

Bank transfers and cards

Faster Payments is the UK rail these payouts often ride on, and most of the reassuring numbers attached to it are secondary-source claims rather than scheme statements. The scheme maximum is £1 million per transaction, raised from £250,000 on 10 February 2022, but that is a ceiling and not an entitlement — individual banks set lower per-payment limits. Over 90 per cent of Faster Payments transactions complete in under two seconds, and there is no minimum transaction size. Visa Direct's Fast Funds service processes in real time, with funds potentially available within 30 minutes of approval. None of this is the casino's doing, and none of it is guaranteed by anybody the casino answers to.

Five signs an offshore casino might actually be real

Trust here is a circumstantial case, built from documents rather than vibes. These are the five things I would check, in this order.

The licence can be verified on the regulator's own site

Not a badge, not a seal image, a working verification path. Clicking a Curaçao Certificate of Operation Seal must redirect to cert.cga.cw, and that seal is issued only to B2C operators and only for an approved, registered player-facing domain. If the design, colour or format of the seal differs, the site is not authorised. If the certificate behind the seal shows a different domain from the one being accessed, the site is displaying another operator's certificate and should be treated as unauthorised or fraudulent — an important detail, because a Curaçao licence certificate is not interchangeable with a Certificate of Operation.

Kahnawà:ke runs a similar check under its Logo Certificate Program, effective 15 January 2010: clicking the Commission's logo generates a Certificate of Good Standing confirming whether the site holds a valid permit. Anjouan certificates carry a unique licence number and a QR verification code linking to a public register, and Anjouan Gaming states that certificates which cannot be verified through that register should not be relied on as evidence of licensing status.

The quick version: find the licence number, go to the register yourself, and check that the domain in front of you is the domain named. The Gambling Commission gives the same advice for its own register — click through and see whether the site's activities and domain names match.

The bonus terms are readable, and short enough to read

Wagering requirements are where a claim first turns into a trap. UK-licensed operators have been capped at ten times since 19 January 2026 under social responsibility code 5.1.1, a rule the Commission brought in saying it "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements". Offshore, the cap does not exist. Published terms from one offshore brand describe a 25× playthrough, with a contribution chart giving slots 100 per cent, table games 20 per cent, video poker and blackjack 10 per cent, roulette and baccarat 5 per cent, and craps, live dealer and jackpot games 0 per cent. Another reserves the right to limit withdrawable bonus winnings to 300 per cent of the credited bonus, voiding the excess. Offshore welcome bonuses are commonly described in trade coverage as 25× to 40×, and no-deposit bonuses at 40× to 60× with a cashout cap — the second figure being a trade summary rather than a regulator's count.

The quick version: read the contribution chart before the wagering number. A 30× requirement with roulette at 5 per cent is a 600× requirement wearing a friendly face.

Identity checks happen at sign-up, not at withdrawal

This is the single most reliable tell, and it is the subject of the Commission's own complaint statistics. Over a quarter of complaints reaching its Contact Centre concern identity verification — a concern customers raise when they are asked for documents only on attempting to withdraw, according to its blog of 12 August 2026. A 2026 blog in the same series describes the Commission's concern about "fuzzy matching" through third-party verification providers, and about onboarding on partial verification: a middle name used instead of a forename can create mismatches with records held elsewhere, including GamStop, undermining the effectiveness of self-exclusion entirely.

The quick version: a casino that verifies you at registration has less leverage over you at withdrawal. A casino that verifies nobody until the money moves the other way has all of it.

The terms do not reserve discretion over your winnings

Watch for language that gives the operator sole power to void a win. UK guidance is explicit that such terms are unfair within the meaning of the Consumer Rights Act 2015 — and enforcement follows. One operator was fined £170,000 in July 2025 for failures including a bonus term stating the operator had the right at its own discretion to close accounts or forfeit winnings. In October 2026 L & L Europe Limited agreed a £900,000 payment in lieu of a financial penalty, including a breach of licence condition 7.1.1 on fair and transparent terms, with withdrawal failures that included a term allowing only one withdrawal request at a time and manual review of every fifth or tenth withdrawal. The Commission's stated position is that it does not consider it fair, transparent or necessary to delay or withdraw purely for interaction purposes, and that the CMA's principles apply to all online gambling operators.

The quick version: search the terms for "at our discretion", "reserve the right" and "sole discretion". Then count them.

There is a named complaints route with teeth

No British help applies, so the question is what exists where the operator does. Anjouan requires licensees to designate an Authority-approved Alternative Dispute Resolution provider and to list its name and contact details in player-facing terms, with complaints expected to be resolved within 30 days before a player escalates. The approved providers there are EGIS ADR, Axion ADR, iGaming ADR and another approved provider. Kahnawà:ke requires a licensee's relationship with players to be contractual and free of terms that are unfair or unreasonable, and employs a full-time Dispute Resolution Officer — though its rules are severe in one direction: a player who breaches a self-exclusion prohibition forfeits any funds deposited or won to a third-party charity selected by the Commission.

For scale, look at what the GB version produces. eCOGRA's report for 1 October 2024 to 30 September 2025 records 911 disputes, of which 150 valid disputes concerned deposits and withdrawals, with an average domestic resolution time of 31 days and 17.8 per cent of completed disputes ruled in the consumer's favour. IBAS's 2024-25 report records 3,721 domestic disputes, 217 of them banking and financial, resolved in an average of 20 days, with 100 per cent operator compliance with decisions in the consumer's favour in both 2023-24 and 2024-25. That last figure is the strongest argument the licensed market has, and its existence depends entirely on the operator being licensed.

The quick version: find the named ADR body, check it is actually approved by the regulator named, and check whether it publishes statistics.

How to check one of these sites properly — six steps

1. Find the licence number and verify it on the regulator's own register. Not a logo on the footer: a number, a register lookup and a matching domain. This is the only step that separates a regulated operator from an unregulated one, and every later step is worth far less without it.
2. Check the licence type, not just that a licence exists. A B2B supplier licence, a legacy orange certificate, an expired provisional or a /JAZ number from a defunct master licensor all look like a licence and none of them authorises an operator to take your bets.
3. Read the bonus terms for wagering, contribution weighting, maximum bet while wagering and maximum cashout. Write the effective requirement down as a number. A maximum bet rule of €5 while wagering, applied alongside a contribution chart that zero-rates live dealer games, decides outcomes long before the redress process does.
4. Check the named ADR provider against the regulator's list, and read its published statistics if it has any. A complaints route is worth exactly as much as the published record of its decisions, and providers that publish nothing are telling you something.
5. Install blocking software as a separate layer from the site. GamStop signposts Gamban and BetBlocker, both of which work independently of any casino. BetBlocker is a non-profit that states it blocks over 1,368,000 gambling websites and 3,100 apps, requires no registration and is free worldwide. Gamban blocks licensed and unlicensed sites, and is designed to be as difficult to remove as possible; it is free for residents of Wales, and costs £4.99 a month or £29.99 a year in England and Scotland after a 7-day trial, following the end of the TalkBanStop funding on 31 March 2026.
6. Use a bank-level gambling block as well. The Gambling Commission's list, last updated 16 October 2026, names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling. Blocks work by declining payments categorised under gambling Merchant Category Codes, are applied at card level so must be activated on each card, do not affect a credit score, and most banks apply a 48-hour or 72-hour cooling-off period before gambling transactions are allowed again.

Two things belong with those steps rather than after them. Self-exclusion through GamStop is a fact and not a workaround: registering blocks a person from all online gambling companies licensed in Great Britain for 6 months, 1 year, 5 years, or 5 years with auto-renewal, it cannot be cancelled during the term, and it stays in place after the end of the chosen period until the person contacts GamStop to remove it. Signing up takes a few minutes and the block can take up to 24 hours to become effective. No offshore casino is a way round that, and any site that markets itself as one is advertising the absence of a safeguard.

And what the law says about the operator is not what it says about the player. Section 33 of the Gambling Act 2005 attaches the offence to the person providing facilities for gambling — it is one of the Act's summary offences, and it is directed at the operator. The Commission's own summary of offences lists providing gambling facilities in Great Britain without a licence as an offence by the operator. That distinction explains the enforcement numbers on this page, and it does not make an unlicensed site safe; it makes it unprotected.

The GamStop question, answered properly

It is often typed "gamestop", and the confusion is understandable when the word looks so much like a games retailer. The scheme is GamStop, and it does one thing: it stops a person signing up for or using online gambling accounts with companies licensed in Great Britain. It cannot reach a site outside that licence, and the Commission has said so in the other direction too — its industry warning notice of 20 January 2025 flagged casino games supplied by licensed operators appearing on unlicensed websites available to GB consumers, noting that such sites often target customers who have self-excluded via GamStop and may have inadequate social responsibility and anti-money-laundering controls. Registered people are also protected from direct marketing, because since April 2020 operators must check their entire customer base against the register at least every 24 hours.

The numbers are worth the space. GamStop recorded 117,756 new registrations during 2025 and had 561,983 active exclusions at the end of the year, with 58,675 registrations in the final six months — an average of 319 a day. The first half of 2026 brought a 16 per cent year-on-year increase and a new monthly record of 12,236 sign-ups in May 2026. As of July 2026 the register held 614,738 consumers, of whom more than one in two had opted for the maximum five-year exclusion, while across all age groups only one in four had chosen six months. Under-25s accounted for nearly one in three of all self-exclusions in that half-year, a 26 per cent year-on-year increase.

Where a person actually gets help

The help that is available is British, free and does not depend on which site caused the problem.

The National Gambling Helpline is run by GamCare on 0808 8020 133, free, 24 hours a day, every day of the year, and the same number reaches live chat and WhatsApp. Callers in Wales are given 0808 2819 265 alongside it. It is not a crisis line, and staff cannot transfer someone at immediate risk of harm, but they do follow safeguarding procedures. BeGambleAware, the public-facing brand of the charity GambleAware, directs people to the same number. GamFam, a registered charity set up by people affected by the gambling of family and friends, delivers peer support through its five-stage GRA5P programme. Gamblers Anonymous England, Wales & Ulster can be reached on 0330 094 0322 and runs around 250 meeting locations with no appointment needed. Gam-Anon UK & Ireland supports family and friends whether or not the gambler attends GA. The NHS National Gambling Clinic at 69 Warwick Road, London SW5 9HB takes self-referrals and professional referrals for 13 to 18-year-olds anywhere in England and for adults in Greater London and the South East. NHS England has opened 15 specialist gambling clinics since 2019, and integrated care boards commission 8 regional services receiving almost 5,000 referrals a year against a target of 3,000.

There is also debt help, which is usually the more urgent need: Citizens Advice offers free, confidential advice including help with debt, and Citizens Advice Scotland runs a Gambling Support Service advice line on 0800 328 1131, Monday to Friday, 10am to 3pm.

Frequently asked

Are new casinos not on GamStop legal?

The operator is the one exposed, not the customer. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and the Commission states plainly that offering commercial gambling services to consumers in Great Britain without a Commission licence is illegal, including where the operator holds a licence in another jurisdiction. An offshore site is serving British customers without that licence. It is not a legal alternative to a licensed operator; it is an unlicensed one.

Why would a new casino stay off GamStop?

Because joining is a condition of a Gambling Commission licence, and one licence condition among many: ten times wagering requirements since 19 January 2026, identity verification before gambling under licence condition 17, no reverse withdrawals, no credit cards since 14 April 2020, financial limits prompted before the first deposit. A site outside GamStop is outside all of it. The Commission's January 2025 warning notice noted that unlicensed sites often target people who have self-excluded, which is the commercial logic in one sentence.

Can an offshore site be trusted with a rapid payout claim?

Judge the mechanism, not the promise. Bitcoin's protocol targets 10 minutes between blocks on average, with a 63 per cent chance of a block inside any 10-minute window, and the classic client treats a transaction as unconfirmed until six blocks deep — so a payout broadcast in minutes settles later. Skrill and Neteller both charge 2.80 per cent, minimum €3.50 and USD 3.50, to move money to a bank account. Fast rails exist; the obligation to use them fairly does not.

What does a maximum cashout clause actually do?

It caps what can leave the account, which is where a bonus stops being a gift. One offshore brand reserves the right to limit withdrawable winnings generated with bonus funds to 300 per cent of the credited bonus, voiding the excess. Another caps the maximum bet while wagering at €5 for regular players and €10 for VIP players, and states that failure to follow its maximum bet rule may result in account closure, forfeit of the bonus and forfeit of winnings generated during wagering. In the UK, no term may impose a maximum limit on withdrawal from the deposit balance.

Can the Gambling Commission get money back from an unlicensed site?

No. The Commission is a regulator and not an ombudsman: it cannot resolve individual complaints or help consumers recover money, though it records every complaint and typically refers disputes to an independent third party. The Gambling Commission's enforcement against unlicensed sites runs through cease and desist notices, registrar and host referrals and search-engine removals — 3,140 notices and 287,961 URL removals since April 2024 — while prosecutions ran at 0 or 1 per quarter across April 2025 to March 2026.

What is the difference between GamStop and a land-based scheme?

Different schemes, different buildings. GamStop Online covers online operators licensed in Great Britain. Land-based casinos use SENSE, whose minimum period is six months, extendable to a maximum of twelve, with removal requestable only in person at a casino during the six-month "Thinking" period that follows; the Commission's May 2026 FOI response put active SENSE self-exclusions at 12,445 between 1 April 2025 and 1 April 2026. Bookmakers' shops use GamStop Betting Shops, telephone-based on 0800 294 2060, for a fixed 12-month term that cannot be ended early, with 9,075 active exclusions over the same period.

Why do the estimates of the illegal market disagree so much?

Because they measure different things. The Commission's analysis of 5 November 2026 asks people, and finds 0.6 per cent of the whole population had engaged with an illegal site in the past four weeks, rising to 2.5 per cent among those who had gambled online in that period. H2 Gambling Capital counts money staked — £16.6 billion in 2025 — which is turnover, not loss. Yield Sec counts revenue, putting the unregulated share at 9 per cent of the online market in 2025. The Commission's own methodology admits it misses VPN traffic.

The licence is the whole argument

The enforcement record is the part that stays with me: since April 2024, 3,140 cease and desist and disruption notices, 447,778 URLs referred, 287,961 removals — and, across April 2025 to March 2026, a single prosecution commenced in twelve months. A market that is illegal by statute and policed almost entirely by paperwork and de-indexing is a market where the operator's exposure is administrative and the player's exposure is total.

The help, once more, is the National Gambling Helpline on 0808 8020 133, free and open 24 hours a day, every day of the year. And the number that ought to decide the question for anyone weighing up a new offshore brand is 96.3 — the share of 44.2 million withdrawals at large British-licensed operators in June to September 2024 that cleared automatically, against a regulator that can act on the other 3.7 per cent.