Games not on GamStop sit on websites with no Gambling Commission licence, because the scheme binds only operators licensed in Great Britain. UK protections, from ADR to deposit checks, do not reach them. Of the 117,756 registrations GamStop took during 2025, 22 per cent chose the five-year auto-renewing term.
The phrase covers a wide range of things and it is worth separating them, because "not on GamStop" describes one single technical fact — no British licence — and everything else about a site is a separate question. A Curaçao-licensed casino and a Costa Rican operation with a "data processing licence" that is not a licence in the legal sense are both outside the scheme, and they are not remotely the same proposition. The point of this page is that gap.
I have spent years reading the Commission's enforcement reports, and the pattern is consistent: the sites that cause trouble are not the ones with a serious second licence and published audit arrangements. They are the ones that treat exclusion as a marketing opportunity. The Commission issued an industry warning notice on 20 January 2025 about casino games from licensed suppliers turning up on unlicensed websites, noting that such sites often target customers who have self-excluded through GamStop, and that their social responsibility and anti-money-laundering controls are frequently inadequate. That is the trade in one sentence: the games are the same games, and the customers are sought out precisely because they are running.
Britain's regulated remote casino sector generated £5.0 billion of gross gambling yield in the year to March 2025, £4.2 billion of it from slots. That is what the licensed market looks like when it works. The offshore corner is what it looks like when a site decides not to be part of it.
Where help lives, since the page is about harm as much as mechanics: the National Gambling Helpline, run by GamCare, is free on 0808 8020 133, 24 hours a day, every day of the year; in Wales the number given is 0808 2819 265. GamStop Online is often typed "gamestop", which is a fact about the name and nothing more.
Table of Contents10
- How the Blocking Works, and Where It Stops
- Casino Games Not on GamStop and the Real Differences
- Gambling Sites Not on GamStop and How the Licence Shapes Money
- Slots and the Stake Cap
- How Identity Checks Work, and How They Are Used Against a Winner
- Five Signs of a Service Worth Trusting
- A Practical Checklist Before Anyone Deposits
- What the Question Really Asks
- Questions About Offshore Sites
- The Gap Between the Licence and the Game
How the Blocking Works, and Where It Stops
GamStop Online is the national online self-exclusion scheme, run by The National Online Self Exclusion Scheme Limited, company number 10504973, and free to users. It has been live since 27 April 2018, when the scheme launched. In November 2025 it was renamed Gamstop Online after a website update, and the betting shop scheme formerly known as MOSES became Gamstop Betting Shops.
Registration blocks a person from all online operators licensed in Great Britain, for six months, one year, five years, or five years with auto-renewal. Signing up takes a few minutes; the block can take up to 24 hours to bite. Once registered, the term cannot be cancelled or shortened — the exclusion stays in place after the chosen period ends unless the person contacts GamStop to remove it. Under the terms last updated 20 May 2026, auto-renewal can only be switched off in the last six months of a five-year minimum period, and the Group's 2025 annual report devotes a section to its refusal to remove registrations early.
The figures tell you how seriously people take the long option. Across 2025: 29 per cent chose six months, 24 per cent a year, 25 per cent five years and 22 per cent auto-renewal. As of the Commission's publication of 16 July 2026, 614,738 consumers were currently on the register, and more than one in two had chosen the maximum five-year exclusion. Only one in four across all age groups had self-excluded for six months. Registrations rose 16 per cent year on year in the first half of 2026, with May 2026 setting a monthly record of 12,236. Under-25s accounted for nearly one in three of those, up 26 per cent.
That is the shape of an entrenched demand, and it is why offshore sites built entirely around serving excluded players exist. The Commission's Illegal Markets team has issued 3,140 cease and desist and disruption notices since April 2024 — 2,032 C&Ds, 774 registrar referrals, 402 host referrals and 3 payment provider referrals — and secured 287,961 URL removals out of 447,778 Bing and Google URLs referred. I would call that a serious effort, and I would also call it a caveat: disruption is not deletion, and the same operators reappear under new domains.
Casino Games Not on GamStop and the Real Differences
Take a roulette wheel. It behaves the same way on an offshore site as on a British one. Casino games not on GamStop are not rigged by definition, and I will not pretend otherwise; the difference is not in the mathematics but in everything wrapped around it. Slot RTP can be configured lower on some offshore sites, table limits can run higher, and the £5 maximum stake per game cycle for online slots that has applied to British-licensed operators for all adults since 9 April 2025 — and £2 for adults aged 18 to 24, from 21 May 2025 — has no counterpart offshore at all.
The Rules That Travel With the Licence
British-licensed sites operate under conditions that are simply absent elsewhere. The credit card ban has applied since 14 April 2020. Financial vulnerability checks became a licensing requirement in August 2024 at £500 net deposits over a rolling 30 days, lowered to £150 on 28 February 2025. From 31 October 2025 every operator must prompt for a financial limit before a first deposit. From 19 January 2026, wagering requirements on bonus funds are capped at ten times and mixed-product promotions requiring two or more types of gambling are banned. None of this follows a player to an offshore site, because none of it binds a site the Commission does not license.
The Commission's own position is unambiguous: it says it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where the operator holds a licence in another jurisdiction. That is stated plainly, published 21 October 2024. What follows from it is a legal point about the operator, not about the player — the Act's general offences attach to those who provide facilities, not to adult consumers. But "not illegal for the punter" is a poor substitute for "protected".
Payment and Licensing Terminals
The licence jurisdictions named on offshore sites vary enormously in what they demand and how they verify it, and the verification is where the marketing gets ahead of the paperwork. Malta's regulator publishes a list of Unauthorised URLs precisely because sites claim Maltese licensing they do not have. Curaçao has replaced its old master-licence model with direct licensing by the Curaçao Gaming Authority, whose Certificate of Operation Seal must redirect to a specific verification address and must match the domain being visited — if the certificate behind the seal shows a different domain, the site is displaying someone else's certificate. Anjouan's published fee schedule is EUR 17,828 for B2C licence issuance and the same for annual renewal, with EUR 500 per additional domain; an ABC News investigation published 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences, and that a former attorney-general of the Comoros called the entity "illegal".
Gambling Sites Not on GamStop and How the Licence Shapes Money
An offshore licence is not one thing. Gambling sites not on GamStop vary from well-capitalised operators with segregated player funds and independently tested random number generators to operations whose only published commitment is a domain name and a wallet address. The table below sets the licence classes against each other on the criteria that matter when something goes wrong.
| Licence | Application and annual cost | What it obliges on player funds | Which approved route checks the operator's seal | Main practical gap against a British licence |
|---|---|---|---|---|
| UK Gambling Commission | Licence fees set by the Commission; statutory levy of 1.1 per cent of previous-year gross gambling yield for online operators, first raised under Regulations commencing 6 April 2025 | Customer funds in a separate client bank account; one of three insolvency ratings — "not protected", "medium protection", "high protection" — disclosed in writing and acknowledged before gambling | The Commission's public register of licensed domains | None; this is the baseline |
| Malta (MGA) | EUR 5,000 one-time application fee; EUR 25,000 fixed annual licence fee; 5 per cent tax on gaming revenue | No equivalent segregated-funds disclosure regime enforced in Great Britain | The MGA's own licence list and its published Unauthorised URLs | No GamStop connection; no British ADR; no £5 slots cap |
| Curaçao (LOK regime) | EUR 4,592 one-time B2C application fee; EUR 47,450 total annual B2C charge | Segregation of player funds required by published standards | Certificate of Operation Seal, which must redirect to the CGA verification address and match the live domain | No GamStop connection; legacy /JAZ numbers are not proof of a current licence |
| Anjouan | EUR 17,828 B2C issuance, EUR 17,828 annual renewal, EUR 500 per extra domain | Fund segregation and certified random number generators required by published standards | Public register with unique licence number and QR code | No GamStop connection; licences carry no territorial restriction under Anjouan law |
| Kahnawake | CPA application fee rises to USD 40,000 on 1 January 2027; annual CPA fee unchanged at USD 20,000 | Contractual relationship required to be free of unfair terms | Logo Certificate Program generating a Certificate of Good Standing | Mandatory hosting in the Mohawk Territory; no GamStop connection |
| Costa Rica | No comprehensive licensing regime exists; the "data processing licence" is not a licence in the legal sense | No published player-fund standard | None | Nothing to verify against |
One number in that table deserves a second look. The Curaçao supervisory charge is EUR 47,450 a year — serious money by any measure — and it still buys a player exactly nothing in terms of British self-exclusion, British ADR or the British £5 slots cap. The licence is a real licence. It is simply a different product.
Slots and the Stake Cap
Slot games not on GamStop are the sharpest case, because the British rules on them are the most specific and the harm usually arrives fastest. The £5 maximum stake per game cycle for online slots for all adults went live on 9 April 2025, under the Gambling Act 2005 (Operating Licence Conditions) (Amendment) Regulations 2025, which attached a new condition to every remote casino operating licence. The £2 limit for 18 to 24-year-olds followed on 21 May 2025. Both apply to online slots games only, not to roulette or blackjack. A minimum of 2.5 seconds must also elapse from the start of a game until the next cycle can begin.
Read those two figures together and the pattern is clear: the regulator identified young adults as the group needing the tightest limit, which is consistent with under-25s making up nearly one in three GamStop registrations in the first half of 2026. An offshore slots lobby that advertises «no stake limits» is advertising, in effect, that none of this applies there. That is not neutral. It is a feature designed for the people the rule was written to slow down.
The design rules go further than stake size. From 19 January 2026 British licensees cannot offer mixed-product promotions requiring two or more types of gambling, and wagering requirements are capped at ten times — a cap the Commission chose because "some licensees currently apply up to 60 times". Ten times is still a trap if you do not read it, but it is a bounded trap. Offshore terms routinely sit at 35x to 50x, and no-deposit offers at 40x to 60x with a cashout cap, according to a 2026 casino-guide comparison. An operator that reserves sole discretion to void winnings for "bonus abuse" is exactly the term the Commission has said is unfair under the Consumer Rights Act 2015.
How Identity Checks Work, and How They Are Used Against a Winner
If one mechanism decides whether an offshore withdrawal arrives, it is verification, and I want to separate two designs that look similar on the surface.
The first time: on a British-licensed site, licence condition 17 has required since 7 May 2019 that identity be obtained and verified before a customer is permitted to gamble. In practice, most operators match the details against credit reference agencies and the electoral roll at sign-up, so no documents are needed at all. A remote casino may also use the "hybrid approach" — identify and verify age at registration, defer full verification until the €2,000 threshold in the money-laundering rules is reached. Since 31 October 2025 operators must also prompt for a financial limit before the first deposit, and since August 2024 a financial vulnerability check can be triggered at £150 of net deposits over 30 days, rising to full financial risk assessments at £5,000 net deposits in a rolling 24 hours for the largest operators, announced 7 July 2026. The checks are intrusive. They are also front-loaded.
Later on: British rules now forbid the classic ambush. Licence condition 17.1.1 says a withdrawal request must not result in a requirement for additional information if the licensee could reasonably have requested that information earlier — and the Commission has said plainly that where a business delays a withdrawal because of insufficient ID it may be in breach. Operators may not impose a maximum limit on what can be withdrawn from a deposit balance; the Commission's own example of a prohibited term is "You may withdraw up to £50 per day and up to £500 per week". Reverse withdrawals were banned outright for all remote operators by requirement 14B, in force 31 October 2021: once a withdrawal is requested, the funds must not be offered back as a deposit.
Offshore, the sequence reverses. Registration is frictionless and identity checks arrive the moment a withdrawal is requested, which is the single most cited complaint type in the sector. The warning signs are consistent across such terms: a maximum cashout expressed as a percentage of the bonus, a maximum bet while wagering set at 20 per cent of the deposit or a flat €5, a rule that free bonuses cannot be redeemed consecutively or winnings are removed, and a clause granting the operator discretion to close an account or forfeit winnings. British guidance requires prohibitions on promotional play to specify the prohibited patterns rather than leave discretion to the operator, and the Commission fined one operator £170,000 in July 2025 for a bonus term reserving exactly that discretion.
Five Signs of a Service Worth Trusting
Confidence in this market has to be built from evidence, because none of it is gifted by a regulator with jurisdiction. These are the five things I would look at, in this order.
A Licence You Can Verify at Source
A named regulator is not evidence; a working verification path is. If a site displays a Curaçao Certificate of Operation Seal, clicking it should redirect to the CGA's verification address, and the certificate behind it should show the same domain you are on. If it shows a different domain, the site is displaying another operator's certificate. Malta's regulator maintains a list of Unauthorised URLs for precisely this reason. And a historic /JAZ number or an old orange certificate proves nothing — the legacy sub-licence certificates of operation ended on 15 October 2025.
Terms Written as Rules, Not as Reservations
The tell is the word "may". British guidance says operators should not use terms giving them sole discretion to void or withhold winnings, because such terms are unfair. An offshore operator that reserves the right to close an account or forfeit winnings at its own discretion has told you what it thinks the contract is. The Commission's fair-terms guidance and the CMA's do's and don'ts set the standard even though they do not bind that operator: no maximum withdrawal limit on a deposit balance, no confiscation for failing identity checks, no confiscation after inactivity.
A Cashout Cap You Can State as a Number
Ask a simple question: what is the largest amount this bonus can produce? If the answer is a percentage — as with one operator's published 300 per cent of the credited bonus amount, excess voided — then the offer has a ceiling built into it that no amount of skill changes. Contrast this with the British position, where no term may impose a maximum limit on withdrawing a deposit balance. A published cap in plain figures is not a red flag by itself; a cap buried in a clause that only surfaces at withdrawal is.
Terms That Say When the Money Arrives
Timing is contractual, and it is testable. Gambling Commission data covering June to September 2024, cited in a speech delivered 6 November 2025, records 44.2 million withdrawals by customers of large online operators, of which 96.3 per cent cleared automatically and 3.5 per cent within 24 hours. British operators are not held to a fixed maximum number of days by the LCCP — the regime relies on fair and open terms, the identity condition and the prohibition on unfair terms. If an offshore operator's terms describe withdrawal in vague phrases without a stated processing period, that vagueness is the policy.
A Dispute Route That Is a Named Body
A regulator is not an ombudsman. The Gambling Commission says so itself: it cannot resolve individual complaints or help consumers get their money back, but it does require British licensees to provide access to an approved Alternative Dispute Resolution provider free of charge if a complaint is not resolved within eight weeks. The approved list includes IBAS, eCOGRA, CEDR, ADR Group, ProMediate, Pegasus ADR, Blexr and the Tattersalls Committee. Anjouan requires licensees to name an approved ADR provider in player-facing terms and lists EGIS ADR, Axion ADR, iGaming ADR and one other provider. Kahnawake employs a full-time dispute resolution officer. Any offshore site that names no one has answered the question for you.
A Practical Checklist Before Anyone Deposits
None of this requires special knowledge, and none of it is a way round anything. It is the ordinary diligence the British regime performs on a player's behalf and that an offshore site leaves to the individual.
- Write down the licence number and verify it at the regulator's own register. Not the badge on the page — the register, opened separately. A badge is a picture; a register entry is a record that can be checked twice, and the second check is the one that matters when a domain changes hands.
- Read the withdrawal clause before the bonus clause. Most people read the offer and stop. The offer is the sales document; the withdrawal clause is the contract, and it is where processing periods, document requirements and caps live. If a bonus is capped as a percentage of the bonus amount, calculate the number now rather than at withdrawal.
- Convert every multiplier into pounds. A 40x wagering requirement on a £50 bonus is £2,000 of play before a penny leaves. Under British rules the cap has been ten times since 19 January 2026. That comparison takes ten seconds and settles most arguments about which offer is better.
- Check whether the games carry independent testing. Anjouan's published standards require random number generators certified by an approved independent testing facility; Curaçao requires segregation of player funds. Where a site's licence regime requires neither, there is nothing behind the claim except the claim.
- Set the account's own limits, and treat the absence of a prompt as information. British operators have had to prompt for a financial limit before a first deposit since 31 October 2025. A site that never asks has no interest in the answer.
- If gambling is already a problem, the register is the tool and the helpline is the door. Self-exclusion through GamStop Online holds for its full term and then stays in place until the person contacts GamStop to remove it — that is stated as a fact, and an offshore site is not a way round it. The National Gambling Helpline, run by GamCare, is free on 0808 8020 133, 24 hours a day, every day of the year; callers in Wales are given 0808 2819 265. Gamblers Anonymous England, Wales & Ulster can be reached on 0330 094 0322 and runs around 250 meeting locations, and Citizens Advice Scotland's gambling support line is on 0800 328 1131, Monday to Friday 10am to 3pm.
What the Question Really Asks
There is a version of this topic that treats "not on GamStop" as a category of product — as though the games themselves were different. They are not. The games are the same, the roulette is the same, and the difference sits entirely in the paperwork behind them: whether anyone can check the operator's licence at source, whether the terms read like rules or like reservations, and whether a dispute has a named address.
The evidence that this matters is not anecdotal. The Commission's analysis published 5 November 2026 estimates that among respondents who had gambled online in the past four weeks, 2.5 per cent had engaged with illegal gambling websites, with a further 1.5 per cent in the past 12 months. Those are small proportions and they are not small numbers. Meanwhile the licensed market keeps growing — total Great Britain gross gambling yield was £17.5 billion in the year April 2025 to March 2026, up 4.4 per cent — which is a useful reminder that the regulated product is not the poor relation here.
My own view, after years of reading enforcement notices, is that the offshore question is less about where a licence was issued than about whether anyone is answerable. A serious regulator four thousand miles away that publishes a verification path, requires segregated funds and names an ADR provider is a different animal from a domain with a wallet and a promise. The distinction is testable, and testing it is the whole job.
The uncomfortable fact underneath all of it is the demand curve. 561,983 people held active GamStop exclusions at the end of 2025, and of the 2025 registrants, 22 per cent chose auto-renewal — a term that can only be switched off in the last six months of the five years. Nobody picks that because the games are better elsewhere. They pick it because, for a while, they need the games to be impossible. The National Gambling Helpline on 0808 8020 133 is free, 24 hours a day, every day of the year.
Questions About Offshore Sites
What gambling sites are not on GamStop?
Any site holding no Gambling Commission licence is outside the scheme, because the requirement in social responsibility code 3.5.5 binds only British licensees. In practice that means Curaçao-, Anjouan-, Kahnawake- or Malta-licensed operators, plus a long tail with no meaningful licence at all, including Costa Rican "data processing licence" operations where no comprehensive gambling licensing regime exists.
Are games on offshore sites actually different from the British versions?
The mechanics are identical; the configuration and the surrounding terms are not. A slot's return-to-player percentage can be set differently on some offshore versions, and the £5 stake cap per game cycle that applies to British online slots for all adults — £2 for 18 to 24-year-olds — has no offshore equivalent. The house edge is the same species of thing. The guard rails around it are not.
Could someone use an offshore site while self-excluded through GamStop?
It is not a way round the scheme, and it is worth being exact about why. GamStop blocks accounts with British-licensed operators only; the exclusion holds for its full term and then stays in place until the person contacts GamStop to remove it. The Commission's January 2025 warning notice specifically flagged unlicensed sites targeting self-excluded customers, and noted their social responsibility and anti-money-laundering controls are frequently inadequate.
Why do offshore withdrawals take so long?
Because the verification sequence runs backwards. On a British-licensed site, identity is checked before gambling under licence condition 17, and 17.1.1 forbids demanding extra information at withdrawal that could reasonably have been requested earlier. Data covering June to September 2024, cited in a speech delivered 6 November 2025, records 44.2 million withdrawals by customers of large online operators, with 96.3 per cent clearing automatically.
Are there Welsh gambling sites not on GamStop, or is that just the same sites?
It is the same sites, viewed from Wales, with one practical difference worth knowing. The National Gambling Helpline number given for callers in Wales is 0808 2819 265, alongside 0808 8020 133 for England and Scotland — the licensing position is identical across Great Britain, so a Welsh player faces exactly the same absence of Commission protection on an unlicensed site as anyone else in the country.
How much of the market is offshore, and is it growing?
Estimates diverge sharply, which is itself the story. Market-intelligence firm H2 Gambling Capital estimates stakes with illegal operators reached £16.6 billion in 2025, up from about £5 billion in 2019, with the legal share falling from 97 per cent to 92 per cent. The Commission's own November 2026 analysis puts recent engagement with illegal sites at 2.5 per cent of online gamblers.
What happens if an offshore operator simply keeps a balance?
The remedies are thinner than onshore. The Gambling Commission is a regulator, not an ombudsman, and cannot help retrieve money; British licensees must offer approved ADR free of charge after eight weeks, and the CMA's undertakings bar confiscating funds for failed identity checks or inactivity. Outside that regime, the practical route is the operator's named ADR provider, if it names one — and the bank, if the payment can be traced.
The Gap Between the Licence and the Game
Games not on GamStop are not a product category and not a loophole; they are an absence of jurisdiction, and everything that follows from it. The honest summary is this: on a British site, more than half a million people are on a register that holds until they ask for it to be lifted, and the Market keeps growing anyway — £17.5 billion of gross gambling yield in the year to March 2026, up 4.4 per cent — because the seat outside the rules is being sold, deliberately, to the people the rules were written to protect.
