UK Casinos Not on GamStop and the Sites the Regulator Chases

A casino not on GamStop is one with no Gambling Commission licence, so the self-exclusion scheme does not cover it. That also means no British protections: no ADR ruling, no 10× bonus cap, no statutory levy. The regulator disrupts such sites rather than licensing them.

Every few months the Gambling Commission publishes a bag of numbers about illegal gambling websites, and every few months a chunk of the industry reads them as proof that the black market is either negligible or overwhelming, depending on which paragraph it stops at. I have been reading these reports for years, and my conclusion is less dramatic than either camp wants. The market for UK casinos not on GamStop is real, it is modest as a share of British gambling, and it survives because enforcement is a game of whack-a-mole played against a supply of cheap licences. What follows is the honest version: what the law actually says, what the Commission actually does about unlicensed sites, and how anyone sensible judges an operator that answers to a regulator with no power over them.

For what it is worth, the scheme's own name is forever being typed "gamestop", which tells you how much attention most players pay to the distinction — and how much money the wrong side of the line can make from that inattention. The British-licensed side of the market sets the standard here, and it is a high one. Offshore operators are measured against it, and most of them fail on something: a term, a delay, a document request that arrives precisely when a withdrawal does.

Before going further, the plain facts. An unlicensed operator offering gambling to people in Great Britain is committing an offence, and the player has no recourse to the Commission, to an approved ADR provider, or to any of the limits that apply to licensed sites. The National Gambling Helpline, run by GamCare, is free on 0808 8020 133, 24 hours a day, every day of the year; in Wales the number is 0808 2819 265. That line does not care where an operator is registered.

What the Enforcement Numbers Actually Say

Here is a checkable benchmark, and it is a good one because it comes with a period attached. Since April 2024 and as published in October 2025, the Commission's Illegal Markets team had issued 3,140 cease and desist notices and other disruption notices — 2,032 cease and desist notices, 774 registrar referrals, 402 host referrals and 3 payment provider referrals. Over the same stretch it referred 447,778 Bing and Google URLs and secured 287,961 removals. Across 160 illegal gambling websites where traffic data existed, engagement fell by an average of 32 per cent after disruption activity.

The detail matters more than the headline. By method, registrar blocks and website suspensions produced an average fall in engagement of 91 per cent each, ahead of GEO IP blocking at 60 per cent, Bing removal at 52 per cent, Google removal at 30 per cent and Facebook removal at 8 per cent. The Commission says so itself: taking a site out of search results makes it harder to find but does not block access. That single sentence is the best argument for the regulator's current approach and the best argument against its reliance on the search engines.

And the tempo is rising. In January to March 2026 the Commission referred 226 websites to search engines and issued 98 cease and desist notices. In April to June 2026 it referred 366 websites covering 147,721 URLs and began no criminal investigations at all. In July to September 2026 it referred 1,835 websites covering 7,677,211 URLs and issued 546 cease and desist notices. Across April 2025 to March 2026, every quarter recorded zero or one prosecutions commenced — one prosecution in total, in October to December 2025.

I take two things from that. First, referrals scale cheaply and prosecutions do not; the Commission has chosen volume over courtroom drama. Second, the fact that registrars and hosts are the effective lever tells you where the pressure should go next, and it is not the search box.

How Big the Unlicensed Market Is

Estimates differ wildly, which is itself informative. The Commission's own analysis published 5 November 2026, covering April 2025 to April 2026, found 0.6 per cent of respondents — including non-gamblers — had engaged with an illegal gambling website in the past four weeks, with a further 0.4 per cent in the past twelve months, and 94.4 per cent showing no indication of using one. Among people who had gambled online in the past four weeks, 2.5 per cent had engaged with an illegal site.

Then the commercial estimates arrive. H2 Gambling Capital put stakes with illegal operators at £16.6 billion in 2025, up from about £5 billion in 2019. Frontier Economics, for the Betting and Gaming Council, conservatively estimated £2.7 billion staked online annually on the black market. Yield Sec, for the Campaign for Fairer Gambling, put the overall online market at £8.8 billion gross gaming revenue in 2025, split 91 per cent regulated and 9 per cent unregulated. Three houses, three numbers, one industry. The Commission's own October 2024 methodology assumes £0.32 of yield per minute of online slots play and openly admits it cannot capture what a VPN hides.

The Regulator's Own View of Its Limits

The Commission states it plainly: its remit covers only websites that trade or advertise to customers in Great Britain, and it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence — including where the operator holds a licence elsewhere. Licensing is the tool; disruption is what is left when the tool does not fit.

Where the Offshore Licence for UK Casinos Not on GamStop Comes From

Strip away the branding and the licensing banner in the footer, and most operators serving British players without a Commission licence hold one of a small number of offshore permissions. They are not interchangeable, and the differences show in how much paperwork the regulator does, how quickly terms change, and whether anyone answers a complaint.

Curaçao

Curaçao is the volume play. The National Ordinance on Games of Chance took effect on 24 December 2024, replacing the old master-licence and sub-licence model with direct licensing by the Curaçao Gaming Authority. The legacy orange sub-licence certificates of operation ended on 15 October 2025, and a historic /JAZ number is no longer proof of anything. Provisional licences granted by operation of law ran to 24 June 2025, were extended to 24 December 2025, and full compliance was required by then for a full licence. Supplier licensing becomes fully mandatory from 24 December 2026.

The money is modest: a one-time non-refundable application fee of EUR 4,592 for a B2C licence, and a total annual B2C fee of EUR 47,450 — a EUR 24,490 licence fee to the National Treasury plus a EUR 22,960 supervisory fee to the CGA, payable in full by 15 January. Verification is a genuine test now: clicking a Certificate of Operation Seal must redirect to the Curaçao Gaming Authority certificate checker, and if the certificate behind the seal names a different domain from the one being accessed, the site is displaying another operator's paperwork. An aggregator reading the register reported 704 licences held by 698 operators, 552 of them active, as of 6 November 2026 — a third-party count, not a CGA publication, and worth treating as an estimate.

Anjouan

Anjouan, a constituent territory of the Union of the Comoros, licenses under legislation adopted in 2005. Published fees are EUR 17,828 for B2C issuance, one-time, and EUR 17,828 for annual renewal, with EUR 500 per additional domain. The regulator says licences carry no territorial restrictions under Anjouan law, but that holders must comply with the law where they operate — and in June 2026 it said expressly that a licence is not a universal authorisation to operate anywhere in the world. Certificates carry a licence number and a QR code linking to the public register.

The scrutiny is the other side of the coin. An ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around EUR 17,000 each per year, that Comoros financial intelligence officials described Anjouan Corporate Services as operating illegally, and that a former attorney-general of the Comoros called the licensing seller "an illegal entity". Anjouan Gaming has said its licences are legally valid, citing an independent legal opinion issued on 19 September 2024 and reconfirmed in February 2026 — a statement made by the licensee side rather than an independent court, so it is reported to be so, not established.

Kahnawà:ke

Kahnawà:ke has the longest pedigree, regulating interactive gaming since its Regulations were enacted on 8 July 1999, and its operators must be hosted at Mohawk Internet Technologies in the Mohawk Territory. It issues one Interactive Gaming Licence at a time — held by that data centre since 1999 — plus Client Provider Authorizations, Key Person Licences and related permits, with no limit on the number of CPAs. Fees rise on 1 January 2027: the CPA application fee from USD 35,000 to USD 40,000, the five-year renewal from USD 5,000 plus the annual fee to USD 40,000 including it, and Key Person Permit fees from USD 5,000 to USD 6,000. The Commission suspended a CPA held by Polar Ventures SDRL effective 29 September 2026 after a show cause notice.

If you want one clean comparison of what these regimes cost and cover, the table below is it.

The levy rate of 1.1 per cent of previous-year gross gambling yield applies to all online operators holding a Commission licence. It raised just under £120 million in its first year, ring-fenced for research, prevention and treatment.

How Identity Checks Work at UK Casinos Not on GamStop

This is the thing the whole topic turns on. On a British-licensed site, identity verification is stitched into onboarding: licence condition 17 requires a licensee to obtain and verify information establishing identity before a customer is permitted to gamble, covering at least name, address and date of birth. The details can come from databases — credit reference agencies and the electoral roll — in which case no documents are needed at all and the process is instant.

The first time is therefore usually invisible. A remote casino may identify customers and verify age at registration and defer full verification to the €2,000 threshold under the Money Laundering Regulations 2017, an approach the Commission calls the hybrid approach. But condition 17.1.1 says a withdrawal request must not trigger a demand for information the licensee could reasonably have requested earlier. Translation: if the documents were needed, they were needed at the deposit, and the Commission has said a delay caused by insufficient ID may be a breach of condition 17.

On an unlicensed site there is no such rule and no one to enforce it if there were. Anti-money-laundering law still bites on the operator, but the incentive runs the other way: documents can be requested whenever the balance is large enough to be worth stalling, and the Commission has no jurisdiction over the outcome. Over a quarter of complaints reaching the Commission's Contact Centre concern identity verification, and the Commission has flagged operators onboarding customers on partial or equivocal verification, including the use of "fuzzy matching" by third-party providers. Onboarding someone under a middle name rather than a forename creates mismatches with records held elsewhere, including GamStop's — which quietly undermines the whole scheme.

The warning signs are recognisable. Documents asked for only on withdrawal. A verification deadline that resets each time you comply. A term letting the operator void winnings at its own discretion — the Commission regards such terms as unfair under the Consumer Rights Act 2015. And, worst of all, a bonus whose terms were never displayed anywhere near the offer.

Five Signs an Offshore Operator Is Worth Judging Fairly

None of these turns an unlicensed site into a licensed one. They are the tests that separate an operator running a real, if foreign, business from a shopfront with a licence graphic in the footer.

A Verifiable Seal, Not a Picture of a Seal

The check: click the seal. A Curaçao Certificate of Operation Seal must redirect to the Curaçao Gaming Authority certificate checker, and the certificate must name the domain you are on. A Kahnawà:ke logo click should generate a Certificate of Good Standing. A copied image that goes nowhere is decoration.

Terms Published Before the Offer, Not After

The check: look for significant conditions — wagering, time limits, maximum bet while wagering — within one click of the promotion itself. The CAP guidance published with the Commission requires this in the UK, and it is a decent proxy anywhere. Terms that appear only in a 9,000-word document behind a login are terms you were never meant to read.

No Maximum Cashout, or a Stated One

The check: search the terms for the words "maximum" and "withdraw". BlueChip Casino caps winnings generated with bonus funds at 300 per cent of the credited bonus and voids the excess. A British licence forbids any such limit on a deposit balance; offshore, it is a clause like any other, and it is the clause most often missed.

A Real Complaints Route, Not a Support Inbox

The check: find the named ADR provider in the terms. Regulators such as Anjouan require licensees to designate an approved ADR provider and publish its contact details, with operators expected to resolve complaints within 30 days before escalation; Curaçao and Kahnawà:ke have their own dispute arrangements. If there is no named provider, the odds of any ruling going against the house are as long as the odds on its games.

Money Held Separately, and Said So

The check: the customer funds clause. A Commission licensee must choose one of three insolvency ratings — not protected, medium protection or high protection — state it in the terms and repeat the "not protected" warning every six months, including the value of funds held. Offshore, segregation is often promised and occasionally true; separate client accounts still do not guarantee return on insolvency, and holding funds overseas is perfectly legal.

What to Check Before Opening an Account Anywhere

These are ordinary, lawful checks. None of them requires a deposit.

1. Read the licence line, then verify it at the source. Find the regulator's public register and confirm the domain matches. A licence number that cannot be looked up is worse than no licence, because it was chosen to mislead.
2. Write down the wagering figure before depositing. From 19 January 2026, Commission-licensed operators cannot apply wagering requirements above ten times on bonus funds, and cannot mix product types in one incentive. The Commission's own justification was that licensees had been applying up to 60×. Offshore, 25× to 50× on a welcome offer is ordinary, and no-deposit bonuses with a €50–€100 cashout cap are common. Knowing the number before you deposit is the whole exercise.
3. Check the withdrawal terms, not the deposit terms. Every site makes depositing frictionless. The Commission has said explicitly that introducing friction at withdrawal rather than at deposit is not acceptable, and in October 2026 an operator running seven websites agreed a £900,000 regulatory settlement for failures that included unnecessarily delaying consumer withdrawals and a term limiting customers to one withdrawal request at a time. Offshore, that term is not a breach of anything.
4. Decide the self-exclusion question honestly and in advance. Registering with GamStop blocks online operators licensed in Great Britain for 6 months, 1 year, 5 years or 5 years with auto-renewal, takes a few minutes, and can take up to 24 hours to take effect. It cannot be cancelled during the term, and it stays in place afterwards unless the person contacts GamStop to remove it. It is a commitment, not a switch. An unlicensed site is not connected to the scheme and never has been.
5. Consider what the licensed side would give for free. Financial limits must be prompted before a first deposit and reviewable at any time; credit cards have been banned for gambling since 14 April 2020; reverse withdrawals were banned on 31 October 2021; disputes can go to an approved ADR provider free of charge if a complaint is unresolved after eight weeks. None of that follows you offshore.
6. Set up the backstops that do work everywhere. Bank gambling blocks are offered by Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling, operate at card level, and cover online casinos, betting sites, gaming apps and physical venues. Blocking software such as Gamban and BetBlocker works outside the licence system entirely. Bank blocks do not affect a credit score.

Questions About UK Casinos Not on GamStop

Why are some online casinos not on GamStop?

Because the scheme binds only operators holding a Gambling Commission licence. Since 31 March 2020 participation has been a licence condition under social responsibility code provision 3.5.5 — licensees "must participate in the national multi-operator self-exclusion scheme" — and in April 2020 operators were required to check their whole customer base at least every 24 hours. An operator with no British licence has no such obligation.

Are casinos not on GamStop legal in the UK?

Offering commercial gambling to consumers in Great Britain without a Commission licence is an offence, and the Commission says that applies even where the operator holds a licence in another jurisdiction. The offence sits with the provider: under section 33 of the Gambling Act 2005 the penalties run to 51 weeks' imprisonment, a fine at level 5, or both. The general betting and gaming offences attach to those providing facilities, not to adult customers.

Do UK protections still apply on an unlicensed site?

Almost none. Self-exclusion through GamStop does not, the ten-times wagering cap does not, the ban on withdrawal maximums does not, and neither does free access to an approved ADR provider. A dispute over a confiscated balance has no route to a British adjudicator, because the Commission is a regulator rather than an ombudsman and cannot resolve individual complaints or recover money.

Can an offshore casino offer free spins with no deposit?

It can offer whatever it likes, which is the problem. A no-deposit bonus typically carries 40× to 60× wagering and a cashout cap in the region of €50 to €100, and some operators forbid redeeming free bonuses consecutively, treating two in a row as grounds to remove subsequent winnings. On a licensed site, terms like that are constrained by fair-and-open rules and must be displayed within one click.

Do any UK-licensed casinos sit outside GamStop?

No. The obligation is a condition of every relevant remote licence, and in April 2020 two operators had their licences suspended under section 118(2) of the Act for failing to integrate by the deadline. A site claiming a British licence and exemption from the scheme is claiming something that does not exist — the register settles it in a minute.

What does all this cost the licensed market?

Rather more than a footnote. The Commission's industry figures put total Great Britain gross gambling yield at £17.5 billion for April 2025 to March 2026, up 4.4 per cent, with the remote casino, betting and bingo sector at £8.3 billion. The statutory levy, at 1.1 per cent of online GGY, raised just under £120 million in its first year and funds research, prevention and treatment. Operators outside the licence system pay none of it.

Summary of Licensing Regimes

The British licensing regime is not perfect — I have watched it take four years to impose a withdrawal rule and still decline to set a maximum payout period — but it is a regime, with a register, a levy, an ADR route and consequences for delay. The offshore market is judged against that and mostly falls short somewhere specific: in a cashout cap, a document request timed to a withdrawal, or a seal that leads nowhere.

Meanwhile the scheme it is often chosen to escape keeps filling up regardless. GamStop reported 614,738 consumers on the register as of July 2026, of whom more than one in two had chosen the maximum five-year exclusion. And that exclusion holds for its full term and stays in place afterwards until the person contacts GamStop to remove it. The National Gambling Helpline remains free on 0808 8020 133, 24 hours a day, every day of the year.