Slots Not on GamStop and the Blocklist Reach

Slots not on GamStop are online slot sites run without a Gambling Commission licence, so the national self-exclusion register has no hold over them. They are not licensed in Great Britain, UK player protections do not apply, and the regulator's response is disruption — referrals, blocks, cease and desist notices — rather than a payout guarantee.

The phrase does a lot of quiet work. There are slot sites not on GamStop because they were never licensed here in the first place, and there are slot sites not on GamStop because they were licensed here, behaved badly, and left. Both appear in the same search results with the same glossy thumbnails and the same promises about payout speed, and one of those two categories is very much worse than the other. The second is the one the Gambling Commission's Illegal Markets team writes about, and it is the one that tends to reappear under a new domain name a fortnight later.

The register itself keeps growing. Gamstop Online had 614,738 consumers on it as of July 2026, and more than one in two of them had chosen the maximum five-year exclusion. Signing up blocks gambling with every operator licensed in Great Britain, and it holds for the full term chosen — after the term ends it stays in place until the person contacts Gamstop to remove it. That is a fact, not a technicality, and no legitimate site can arrange a way round it. Where the register has no reach is outside the licensed market, which is the whole subject of this page.

I have spent years reading the Commission's enforcement bulletins and the terms and conditions behind them, and my view is that the interesting question is not whether a site is on a list. It is what happens when something goes wrong, and who has the power to do anything about it. On that measure, most of the market that markets itself to self-excluded players fails badly.

What Slot Sites Not on GamStop Actually Are

A slot site not on GamStop is simply a site whose operator holds no Gambling Commission operating licence, and the register only ever covered licensed operators. Since 31 March 2020 every online operator in Britain has had to participate in GAMSTOP as a condition of its licence, under social responsibility code provision 3.5.5 of the Licence Conditions and Codes of Practice, which states that licensees must participate in the national multi-operator self-exclusion scheme. A site outside that scheme is outside the licence, and that is the whole of the legal position.

The scheme's own name trips people up. It is written GamStop, and it is commonly typed "gamestop" — a slip the word "game" invites. Gamstop Online, as it has been called since a rename in November 2025, is run by The National Online Self Exclusion Scheme Limited, company number 10504973, and is free to use. It was set up in June 2017 by the Remote Gambling Association at the request of what was then the Department for Digital, Culture, Media and Sport and the Gambling Commission, and went live on 27 April 2018.

What the scheme cannot do is stated on its own pages: it blocks access to gambling websites and apps licensed in Great Britain only, and cannot prevent access to services run by organisations that do not participate. Offshore sites holding no UK licence are not connected to Gamstop and are not covered by it — a point stated by trade and press sources rather than in a single regulator page, though it follows directly from Gamstop's terms of use.

The law is blunter than the marketing. Section 33 of the Gambling Act 2005 makes it an offence for a person to provide facilities for gambling without an operating licence, and the offence is punishable on summary conviction by up to 51 weeks' imprisonment, a fine at level 5, or both — six months in Scotland. Crucially, section 33 applies to remote gambling if at least one piece of remote gambling equipment used is situated in Great Britain, and it is immaterial whether facilities are provided wholly or partly by remote communication or inside or outside the UK. The Commission's own words, published in October 2024, are that it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where the operator holds a licence in another jurisdiction.

That last clause is the one an offshore site's promotional copy never quite reaches. A Curaçao certificate and a Malta licence are real documents from real regulators. They are also not permissions to trade in Britain, and no licence from anywhere else can exempt an operator from the law of the market it is serving.

Why the Register Was Built for Online Slots Not on GamStop

The register was built for a specific problem, and the numbers explain the appetite for getting round it. Gamstop recorded 117,756 new registrations during 2025 and had 561,983 active exclusions at 31 December 2025, with 58,675 of those registrations arriving in the final six months of the year — an average of 319 a day. The first half of 2026 brought a 16 per cent year-on-year increase, and May 2026 set a monthly record of 12,236 sign-ups.

The patterns are worth a journalist's attention. Under-25s accounted for nearly one in three of all Gamstop Online self-exclusions in the first half of 2026, a 26 per cent year-on-year rise. Across the 2025 registrations, 29 per cent chose six months, 24 per cent chose a year, 25 per cent chose five years and 22 per cent chose auto-renewal. The 2025 annual report recorded the gender split as 94.3 per cent male and 5.7 per cent female.

That is a large, growing and predominantly young, male register — exactly the audience that offshore slot advertising pursues. The Gambling Commission issued an industry warning notice on 20 January 2025 about casino games supplied by licensed operators turning up on unlicensed websites available to GB consumers, noting that such sites often target customers who have self-excluded via GAMSTOP and may have inadequate social responsibility and anti-money-laundering controls. I would put it more plainly: a site whose business model assumes its customers cannot open an account anywhere legitimate has already told you what it thinks of them.

What the Regulator Does About Slots Not on GamStop

This is the part of the subject I find genuinely interesting, because the Commission's answer is not prosecution. It is disruption — making unlicensed sites harder to reach, harder to find and harder to fund. Its Illegal Markets team has since April 2024 issued 3,140 cease and desist and disruption notices, comprising 2,032 C&Ds, 774 registrar referrals, 402 host referrals and 3 payment provider referrals, and over the same period referred 447,778 Bing and Google URLs, securing 287,961 removals. Across 160 illegal gambling websites where traffic data existed, the average fall in engagement after disruption action was 32 per cent.

The method matters more than the total, and the Commission's own figures on method are unusually candid.

The Commission says outright that GEO IP blocking and registrar blocks are more effective than search-engine removals, because a search-engine removal makes a site harder to find without fully blocking access. That is the honest version of the story, and it cuts two ways. Search removals are the visible, headline-friendly part of the work — 366 websites and 147,721 URLs referred in April to June 2026, then 1,835 websites and 7,677,211 URLs in July to September 2026, with 546 cease and desist notices in the same quarter. The unglamorous work of pressuring registrars is what actually moves traffic.

Criminal enforcement, by contrast, is close to a formality. Across April 2025 to March 2026, every quarter recorded either zero or one prosecution commenced — one in total, in October to December 2025. Nobody should expect a prosecution to recover anyone's money, because prosecution is not what the Commission does with individual grievances. It is a regulator, not an ombudsman, and it cannot resolve individual complaints or help consumers get their money back.

The Licence Question, and the Terms That Build in Delay

A licence is not a logo, and this is where careful reading pays. Curaçao rebuilt its regime from the ground up: the National Ordinance on Games of Chance took effect on 24 December 2024, the Curaçao Gaming Authority became the direct licensing and supervisory authority, the legacy "orange" sub-licence certificates of operation ended on 15 October 2025, and a historic /JAZ number or legacy seal must not be treated as independent proof that an operator currently holds a valid licence. Licensing activities ceased for the four former master licensors on dates running from 18 August 2024 to 31 January 2025. The CGA also said on 7 October 2026 that its previous online gaming portal would not return to service, and that the old digital licence seal may be affected by the transition — so the verification route players had learned to use has itself moved.

Anjouan's position is more contested. A licensee's own statement says an independent legal opinion from a law firm regulated in England and Wales and Quebec confirms the regulator's status, but that is the licensee talking. An ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around EUR 17,000 each per year, and that Comoros financial intelligence officials described Anjouan Corporate Services as operating illegally; the same investigation reported a former attorney-general of the Comoros calling the licensing entity illegal and saying the Anjouan Offshore Financial Authority was stripped of recognised-regulator status by Comorian banking laws passed in 2013 and 2015. Anjouan Gaming's own June 2026 statement is the sensible line in all this: an Anjouan licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world".

Kahnawà:ke is the oldest of the three, the fight over its regulation having begun under legislation enacted in 1999, and it runs a Logo Certificate Program — click the Commission's logo on a site and you get a Certificate of Good Standing confirming whether that site holds a valid permit. Malta is the jurisdiction most often cited as a serious alternative, and its B2C licence carries a one-time EUR 5,000 application fee, a fixed annual EUR 25,000 licence fee, gaming tax of 5 per cent of revenue, and minimum share capital of EUR 100,000 for Type 1 and Type 2 licences. It also publishes a list of Unauthorised URLs, declaring any reference to the MGA or a Maltese licence on them to be false and misleading.

None of that makes an offshore licence a British one. The terms that build in delay are the tell. Licence condition 17.1.1 requires that a customer's withdrawal request must not result in a requirement for additional information if the licensee could reasonably have requested it earlier. That refunds nothing by itself, but it establishes a principle offshore terms simply do not contain. There is also no fixed maximum number of days in which a UK licensee must complete a withdrawal; the regime leans on the fair-and-open condition 7.1.1, condition 17.1.1 and the prohibition on unfair terms. On 21 October 2026 the Commission announced that one licensee, which runs seven websites, would pay £900,000 in a regulatory settlement for failures including unnecessarily delaying consumer withdrawals — among them a term stating customers could request only one withdrawal at a time, found unfair under the Consumer Rights Act 2015, and manual review of every fifth or tenth withdrawal that led to extra information being demanded before processing. That is what a licensed operator gets for padding out a payout. Offshore, a clause like that is not a breach of anything, because there is nothing to breach.

How Identity Checks Work on a Site Outside the Scheme

Identity verification is the single thing this topic turns on, and it is the mechanism most often misread. On a licensed site the first pass is usually electronic: the operator matches the account against databases such as credit reference agencies and the electoral roll, and no documents are needed. Where that fails, documents are requested — the Commission names passports, driving licences and household bills — and the requested list is not specified by the regulator. If a business can verify identity electronically the process may be instant; if documents are needed it may take longer, and the Commission states outright that it cannot provide a timescale because the length varies.

Later, the same checks become recurring. Licence condition 17 requires information establishing identity, including name, address and date of birth, before a customer is permitted to gamble, and licensees must take reasonable steps to keep it accurate. Under the Money Laundering Regulations 2017, remote casinos must identify and verify when a customer deposits or withdraws €2,000 or more, whether in a single transaction or in linked transactions — linked meaning, for example, transactions in the same game or the same logged-on period. The Commission's declared expectation is that identity and age checks move forward to before a customer deposits or stakes, and it has criticised onboarding on incomplete or inaccurate information: initials instead of full names, nicknames, commercial addresses instead of residential ones. One detail in its August 2026 blog deserves to be better known — onboarding a customer using a middle name instead of a forename can create mismatches with records held elsewhere, such as GAMSTOP, undermining the effectiveness of self-exclusion.

That is the safeguard offshore terms quietly remove. A withdrawal-gated check is late by design: it means a player can deposit freely and only meets the paperwork when they try to take money out, which is precisely the friction the Commission has called unacceptable. Offshore operators are also not bound by the €2,000 trigger, the ten-times wagering cap that came into force on 19 January 2026, the ban on mixed-product promotions, or the ban on reverse withdrawals under requirement 14B, in force since 31 October 2021.

The warning signs are consistent. A site that advertises itself primarily by what it does not have to do. A withdrawal page that mentions verification only after the wager. A bonus whose terms run to thousands of words with a maximum cashout limit in the small print — offshore terms routinely cap winnings generated from bonus funds, one version at 300 per cent of the credited bonus amount with the excess voided, against a UK rule that operators may not place any maximum limit on what a consumer may withdraw from their deposit balance. A "no-deposit bonus" that cannot be redeemed twice in a row. And a complaints page that names no independent dispute body at all.

Five Signs a Slot Site Can Be Trusted

Trust is a checkable, not a feeling. These are the five I would apply, in order.

The licence is British, and the register entry matches the domain

The test is the Commission's public register, not the footer badge. The Commission advises consumers to click through to the register and see whether the site's activities and domain names match. A licence certificate that names a different domain from the one being visited is a certificate belonging to somebody else. Curaçao makes the same point in its own way: clicking a CGA Certificate of Operation Seal must redirect to cert.cga.cw, and if the seal differs in design, colour or format the site is not authorised. Two minutes here is worth more than any review page.

Wild claims that the excluded are welcome

A site that openly advertises itself to people who have self-excluded has told you what its compliance function is for. Self-exclusion holds for its full term and then remains in place until the person contacts Gamstop to remove it — that is how the scheme works, and no operator can arrange an exemption. An operator building its pitch around that fact is not a lucky escape; it is the specific behaviour the Commission's January 2025 warning notice described.

Withdrawal terms that are short, plain and free of unilateral discretion

Look for the absence of the words "may" and "reserve the right" in the withdrawal clause. UK guidance states that operators should not use terms giving them sole discretion to void or withhold winnings, because such terms are unfair within the meaning of the Consumer Rights Act 2015. If a clause lets the operator decide at its own discretion whether to pay, the answer is already no.

Complaints go somewhere independent, and it is free

A licensed operator must let a customer refer an unresolved dispute to an approved alternative dispute resolution provider free of charge, after the operator's own complaints procedure — and a consumer must have gone through that procedure first. The approved list includes IBAS, eCOGRA, CEDR, ProMediate, ADR Group, Pegasus, Blexr and the Tattersalls Committee. Offshore, the question is whether any named ADR body exists at all; Anjouan, for instance, requires licensees to designate an approved provider and resolve complaints within 30 days before escalation, and its current approved list is EGIS ADR, Axion ADR, iGaming ADR and an independent provider. A site with no named provider has no route past its own support inbox.

Money is separated, and the site says how

UK rules require customer funds to be held in a separate client bank account, and each business must pick one of three protection ratings — not protected, medium protection or high protection — state which applies in its terms, and remind customers every six months if funds are not protected at all. The uncomfortable truth is that a separate client account does not guarantee repayment on insolvency, and operators are legally allowed to hold customer money in overseas bank accounts. Offshore, the question is sharper still, because there is no rating to disclose and no regulator to chase.

Judging a Slot Site Not on GamStop in Six Steps

Five or six ordinary checks, no special knowledge, no risk to anyone.

1. Check the licence on the regulator's own register, not the site's footer. Open the Gambling Commission's

public register, search the operator name and compare the licensed domain against the address bar. The reason: a badge is an image file, and a register entry is a record.

1. Read the withdrawal clause before depositing anything. Search the terms for "withdraw", "verification",

"maximum" and "discretion". The reason: the terms that cause the most trouble are written long before they are used, and they are readable in a few minutes.

1. Find the named ADR provider. If a site names IBAS, eCOGRA or another approved body and explains how to reach

it, complaints have a route. If it names none, the operator's own inbox is the whole of the process.

1. Look for the customer-funds rating and what it means in practice. In plain English: are the funds held

separately, is the money held in Britain, and what happens if the company fails? A UK operator must disclose this in writing; an offshore one has no such duty.

1. Verify any seal by clicking it. A certificate should open the regulator's own verification page and show the

same domain as the site being visited. A dead link, a certificate for another domain, or a static image with no link at all is a claim, not a licence.

1. Set the money aside from the decision. Bank gambling blocks are the practical backstop here — Bank of

Scotland, Barclays, Halifax, HSBC, Lloyds, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling all offer one, applied at card level, so it must be activated on each card, with most banks using a 48-hour or 72-hour cooling-off before gambling transactions resume. The reason: the block is a control you own, and it works on sites no regulator has ever heard of.

Paypal, Pay by Mobile and the Rest of It

Payment method is not a safety feature, and this is where a lot of offshore marketing is quietly dishonest. Paypal slots not on GamStop and pay by phone bill slots not on GamStop are the two most persistent queries in this niche, and neither method carries a guarantee. The Gambling Commission banned credit card gambling from 14 April 2020 under licence condition 6.1.2, and the ban also requires operators to ensure that money arriving through an e-wallet was not loaded from a credit card — a rule that applies to licensed operators and to nobody else. Licence condition 5.1.2, effective 31 January 2024, requires that deposit methods be provided by a payment service provider within the Payment Services Regulations 2017, which rules out a fair amount of what offshore deposit pages offer.

The Commission's own enforcement record says a good deal about how these routes survive. It made its first referral to Visa in January 2025 following a test purchase on an unlicensed website, and has since made three further referrals covering three separate unlicensed websites; it describes reporting payment transaction data to the Visa Operator Scheme as a critical and still early-stage part of its financial disruption strategy. In other words, the payment side is the least developed lever the regulator has. That is worth knowing before treating any payment method as a form of insurance.

Speed is the other half of it, and the honest picture on licensed sites is unremarkable. Commission data covering June to September 2024 recorded 44.2 million withdrawals by customers of large online operators, of which 96.3 per cent cleared automatically and 3.5 per cent cleared within 24 hours. Consumer research published in July 2026 found 49 per cent of people who had gambled in the past 12 months agreed that it is quick and easy to withdraw winnings, with 33 per cent neutral and 18 per cent disagreeing. Bear in mind that the number one topic raised with the Commission's contact centre by consumers was problems with withdrawals, and that complaints coded "Withdrawals and/or financial transactions" fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025. A licensed site in Britain is not perfect at paying people. It is, however, a site where a complaint has somewhere to go.

A Note on the Numbers Behind the Hullabaloo

The unlicensed market is a real problem and a heavily spin-dried one, so it is worth separating the estimates. The Commission's analysis published on 5 November 2026, covering April 2025 to April 2026, puts it modestly: across the whole population including non-gamblers, 0.6 per cent of respondents had engaged with illegal gambling websites in the past four weeks, and a further 0.4 per cent in the past 12 months, while 94.4 per cent showed no indication of using one. Among respondents who had gambled online in the past four weeks, the estimate is 2.5 per cent, with another 1.5 per cent in the past year. It also recorded 586 illegal gambling websites accessible to GB consumers identified in September 2026, 4 per cent fewer than the previous three-month average but 4 per cent more than September 2025.

Then there are the commissioned studies, and they differ by an order of magnitude. Market-intelligence firm H2 Gambling Capital estimates the amount staked with illegal operators in the UK reached £16.6 billion in 2025, up from about £5 billion in 2019, with the proportion of gambling happening legally falling from 97 per cent to 92 per cent. A study by Frontier Economics for the Betting and Gaming Council conservatively estimated £2.7 billion staked annually online on the black market, equal to 2.1 per cent of the £128 billion staked with GB regulated remote casino, betting and bingo operators. Analysis for the Campaign for Fairer Gambling put the GB online market at £8.8 billion gross gaming revenue in 2025, split 91 per cent regulated and 9 per cent unregulated. Treat the differences as a sign of methodology, not of conspiracy: the Commission's own October 2024 methodology combines web-traffic data with an assumption of £0.32 gross gaming yield per minute for online slots and explicitly notes it does not capture activity hidden by VPNs.

The Illegal Gambling Taskforce is the newest piece of machinery, its terms of reference published by DCMS on 13 May 2026 with three priorities — reducing payments to and from illegal operators, tackling online advertising of illegal gambling, and improving cross-agency enforcement — running for twelve months and meeting at least twice a year. It is early to judge, and I would rather judge it on results than on the existence of a taskforce.

Reality of Mobile Sites Outside the Scheme

The mobile question changes less than the marketing suggests. A site outside the scheme is the same site on a phone, and the checks are identical — the same register lookup, the same terms, the same missing ADR provider. The practical difference is that small screens bury the relevant text, withdrawal clauses are harder to find, and pages load in a sequence designed to get from landing to deposit as fast as possible.

The rules that matter here are the ones already mentioned. Since 31 October 2025, all gambling businesses must prompt customers to set a financial limit before their first deposit, using a free-text box at account level, and remind customers every six months to review their account and transaction information; under RTS 12E, setting a limit must be the default and the customer must actively decline. Financial vulnerability checks became a licensing requirement in August 2024 at £500 net deposits over a rolling 30 days, lowered to £150 from 28 February 2025, and the Commission announced on 7 July 2026 that Financial Risk Assessments will arrive in stages, starting with the largest operators at £5,000 net deposits in a rolling 24-hour period for customers aged 25 and over and £2,500 for under-25s. The pilot found 97 per cent of customers above the thresholds could be assessed without friction, and fewer than 3 per cent of accounts would need an assessment. None of this exists on a site with no British licence — which is exactly why those sites are so keen on the small screen.

Where the Help Is

The National Gambling Helpline is run by GamCare, is free, and is open 24 hours a day on 0808 8020 133, also reachable by live chat and WhatsApp, with 0808 2819 265 for callers in Wales. BeGambleAware is the public-facing brand of the charity GambleAware and directs people to the same number. GamFam, a registered charity set up by people affected by the gambling of family members, runs a five-stage peer-support programme called GRA5P. Gamblers Anonymous England, Wales and Ulster can be reached on 0330 094 0322 across around 250 meeting locations. The NHS National Gambling Clinic at 69 Warwick Road, London SW5 9HB takes self-referrals on 020 7381 7722, and Citizens Advice offers free confidential help with debt linked to gambling. None of these services cares whether the site involved was licensed. The call is free either way.

FAQ

What slot sites are not on GamStop?

Any site whose operator holds no Gambling Commission licence. The scheme covers only operators licensed in Great Britain, and participation has been a licence condition since 31 March 2020 under social responsibility code 3.5.5. Sites regulated in Curaçao, Anjouan, Kahnawà:ke or Malta, or holding no licence at all, are outside the register entirely — as are sites that lost their British licence and continue taking players.

Are slots not on GamStop legal in the UK?

For the player, there is no offence in the Gambling Act 2005 that attaches to an adult placing a bet. The Act's offences attach to those who provide facilities without a licence: section 33 makes it an offence to provide gambling facilities without an operating licence, punishable by up to 51 weeks' imprisonment, a fine at level 5, or both. The site is acting unlawfully. The protection that would otherwise cover the player is not there.

Is there a list of slots not on GamStop?

No official one, and that is the point. Nobody maintains a register of operators who have no licence, and a list compiled by an affiliate is a marketing document. The Commission's public register is the only authoritative list, and it works in the opposite direction: look up the operator and see if the domain appears. Its Illegal Markets team has disrupted 3,140 notices and referrals since April 2024.

Do paypal slots not on GamStop exist, and does that help?

Some offshore sites accept Paypal or an e-wallet funded from a card, but the method changes nothing about the licence. UK operators must ensure money arriving via an e-wallet was not loaded from a credit card, under a ban in force since 14 April 2020, and deposit methods must come from a payment service provider within the Payment Services Regulations 2017. Those duties bind licensed operators only.

Why does the site mention slots not on GamStop to people who excluded?

Because that audience is commercially attractive to a certain kind of operator. The Commission's warning notice of 20 January 2025 noted that unlicensed sites available to GB consumers often target customers who have self-excluded via GAMSTOP. A self-exclusion holds for its full term and then stays in place until the person contacts Gamstop to remove it. It is not a barrier a site can waive, and no site that claims otherwise is doing anyone a favour.

What happens if an offshore slot site refuses to pay?

The options are thin. The Gambling Commission is a regulator and not an ombudsman, so it cannot resolve individual complaints or recover money, though it records them and typically refers disputes elsewhere. There is no British licence to threaten and no British ADR route to use. A payment method rule breach can be reported, and the Commission has referred unlicensed sites to Visa four times since January 2025 — that disrupts the operator, not the withdrawal.

The Short Version, Briefly

Slots not on GamStop are sites outside a system that was carefully built to have reach, and my judgement after reading the enforcement record is that the Commission's model of disruption works better than most people assume and was never designed to give anyone a refund. Registrar blocks cut engagement by an average of 91 per cent, GEO IP blocking by 60 per cent, and Google removals by 30 per cent — the quieter the lever, the better it performs, which is roughly the opposite of how the work gets reported. The one thing none of it does is put money back in a player's account. If there is a single number to carry away, take 614,738: that is how many people were on the Gamstop Online register as of July 2026, and every one of them is outside the reach of the sites this page has been about. The National Gambling Helpline is free on 0808 8020 133, 24 hours a day.