A casino not on GamStop holds no Gambling Commission licence, so it sits outside Britain's self-exclusion scheme, the £2 slots cap and every other protection that comes with a British licence. Anyone excluded through GamStop can join one, which is precisely the problem: those sites are not a way round an exclusion, they are where an exclusion stops working.
The scheme's name, incidentally, is often typed "gamestop", a slip the word "game" seems to invite; the scheme itself is GamStop.
There is a phrase that gets used about these sites as though it were a category: "UK casinos not on GamStop". It is worth being precise, because the words collapse two very different things. A casino can be legal in Britain and simply be a different kind of business — an arcade, a bingo club, a betting shop using a land-based exclusion scheme. Or it can be an offshore operator with no British licence at all, taking British deposits from a server somewhere else and answering to a regulator that has never heard of the Gambling Commission. The first is ordinary. The second is the one that turns up in the Commission's enforcement bulletins, and it is the one this page is about.
The numbers are not as large as the trade press implies, and not as small as the industry's critics sometimes pretend. The Commission's own survey work, published 5 November 2026 and covering April 2025 to April 2026, found 0.6 per cent of all respondents had used an illegal gambling website in the past four weeks, with another 0.4 per cent in the past year — but among people who had gambled online in that four-week window, the figure was 2.5 per cent, plus 1.5 per cent over the longer period. Its illegal gambling dashboard recorded 586 sites accessible to British consumers in September 2026. That is a small share of the market and a large number of websites, and the gap between those two facts is the whole story of this corner of the trade.
This page is written from one angle: the risk of harm, and where help is. Not the size of a welcome bonus.
Table of Contents9
- What "Not on GamStop" Actually Means
- GamStop's Own Numbers, and What They Say About Leakage
- The Licence Standards, Side by Side
- Where the British Standard Is Set
- The Importance of Identity Verification
- Five Signs an Operator or Service Can Be Trusted
- A Careful Player's Checklist
- Questions About Offshore Casino Safety
- Where the Wall Ends
What "Not on GamStop" Actually Means
A uk casino not on gamstop is simply one that has not signed up to the national online self-exclusion scheme, and cannot sign up, because participation is a condition of a Gambling Commission licence.
That condition is not a suggestion. Since 31 March 2020 every online operator must be part of GamStop as a term of its licence; the requirement sits in the Licence Conditions and Codes of Practice at social responsibility code provision 3.5.5, which reads, in full, "Licensees must participate in the national multi-operator self-exclusion scheme." Operators were told about the deadline in January 2020, and the Commission meant it: on 3 April 2020 it suspended the licences of two online operators for failing to integrate in time, acting under section 118(2) of the Gambling Act 2005. In April 2020 it added the requirement that operators check their entire customer base for GamStop registration at least every 24 hours, which also stopped registered people receiving direct marketing.
So the phrase describes a firewall, not a feature. A site that is not on GamStop is, by definition, a site the Commission does not license — because if it were licensed, it would be on GamStop, and if it were licensed and not on GamStop, it would be trading illegally.
The Commission is blunt about the other half of this. It states plainly that it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a licence from the Commission, "including where the operator holds a licence in another jurisdiction". That is section 33 of the Gambling Act 2005, which carries on summary conviction up to 51 weeks' imprisonment, an unlimited-ish fine at level 5 on the standard scale, or both — six months in Scotland. The offence is the operator's; the Act's general gambling offences attach to those who provide facilities, not to adult consumers. That distinction matters enormously in practice, and it is why the enforcement figures below are counted in cease-and-desist notices rather than in prosecutions.
GamStop's Own Numbers, and What They Say About Leakage
The single most useful checkable figure for this subject is the register itself, because it tells you how many people are standing behind a wall that an offshore site ignores.
As of July 2026 GamStop Online reported 614,738 consumers currently on the register, of whom more than one in two had chosen the maximum five-year exclusion; across all age groups only one in four had chosen six months. Registrations rose 16 per cent year-on-year in the first half of 2026, with May 2026 setting a monthly record of 12,236 sign-ups. Under-25s accounted for nearly one in three of all self-exclusions in that half-year, a 26 per cent year-on-year increase.
Set against that, the Commission's estimate of 2.5 per cent of recent online gamblers touching an illegal site starts to look less like noise. The Commission issued an industry warning notice on 20 January 2025 specifically about casino games supplied by licensed operators turning up on unlicensed sites, noting that such sites "often target customers who have self-excluded via GAMSTOP" and may have inadequate social responsibility and anti-money-laundering controls. It said that out loud, in a regulatory notice, with a date on it.
One more figure, because it is the one the trade prefers not to quote. Across the Commission's monitored period from May 2024 to July 2025, just over 1,000 unique illegal gambling websites were accessed by consumers in Great Britain. Identified sites rose from 364 in May 2024 to 535 in July 2025. This is not a fringe of three or four operators hiding behind a proxy.
The Licence Standards, Side by Side
Here is where the two markets actually differ, and it is not about whether the games are fair — most software is the same software. It is about what happens when something goes wrong.
| Criterion | British licence (Gambling Commission) | Offshore licence (Curaçao, Anjouan, Kahnawake) |
|---|---|---|
| Self-exclusion | GamStop, 6 months to 5 years, binding on every licensed operator | No GamStop connection; schemes vary by regulator or do not exist |
| Slot stake cap | £5 per game cycle for all adults; £2 for 18–24s, from April and May 2025 | No cap |
| Bonus wagering | Capped at 10× from 19 January 2026 | Commonly 25×–40×; 35×–50× on welcome offers reported elsewhere |
| Withdrawal terms | No maximum withdrawal limit permitted; reversal banned since 31 October 2021 | Maximum cashout clauses are standard, e.g. 300% of bonus credited |
| Fund protection | Separately held client account plus a published "not protected / medium / high" rating | Segregated player funds required by Anjouan rules; enforcement unproven |
| Dispute route | Commission-approved ADR free to the consumer, e.g. IBAS or eCOGRA | Anjouan requires a named ADR provider, e.g. EGIS or Axion; others handle disputes in-house |
| Help and harm data | Statutory levy, £120m in year one, ringfenced for research, prevention, treatment | None; no contribution to British harm funding |
The British column is made of rules with dates attached, and I have chosen those dates deliberately. The £2 stake limit for 18-to-24-year-olds went live on 21 May 2025, five weeks after the £5 limit for all adults on 9 April 2025, both attached to every remote casino licence by the Gambling Act 2005 (Operating Licence Conditions) (Amendment) Regulations 2025. The 10× wagering cap arrived on 19 January 2026 under social responsibility code 5.1.1; the Commission's own reasoning was that a cap would "take out extreme levels as some licensees currently apply up to 60 times wagering requirements". Curaçao's LOK reform took effect on 24 December 2024 and replaced the old master-licence model, but it did not create a stake cap, a GamStop connection or anything resembling the British regime.
The offshore column is not invented — the 300 per cent cashout clause, the ₹400/€5/$5 maximum bet while wagering, the 25× playthrough, the zero per cent contribution from live dealer games, all come from operators' own published terms. That is the point. These are not hidden traps; they are written down, in a language most players skim, on a page most players never open.
Where the British Standard Is Set
A licensed British operator is the benchmark against which everything else should be measured, because it is the only one that has someone standing behind it.
Take withdrawals, the subject that generates more complaints to the Commission than any other. The Commission's data for June to September 2024 records 44.2 million withdrawals by customers of large online operators: 96.3 per cent cleared automatically, 3.5 per cent within 24 hours, 0.1 per cent taking up to 48 hours. That is what the British market now looks like at its best. Yet the Commission also reported that over a quarter of complaints reaching its Contact Centre concern identity verification, a grievance that arises when documents are demanded only at the point of withdrawal — and its 2026 blog on the subject names the practice squarely, alongside the use of "fuzzy matching" and onboarding customers on partial verification.
The rules exist to stop that. Licence condition 17.1.1 says a withdrawal request must not result in a demand for extra information if the operator could reasonably have asked earlier. Condition 7.1.1 requires terms not to be unfair within the meaning of the Consumer Rights Act 2015. The Competition and Markets Authority's undertakings, given by six operators and published on 29 August 2018, forbid any maximum limit on the amount a consumer may withdraw. And where it goes wrong, the Commission acts: on 21 October 2026 one operator agreed a £900,000 regulatory settlement including a term stating customers could request only one withdrawal at a time, which the Commission found unfair.
Now hold that against an offshore term permitting the operator to void everything above 300 per cent of the bonus credited. Same activity, same player, radically different outcome — and no regulator in Britain with jurisdiction to do anything about it.
The Importance of Identity Verification
If you take one mechanism away from this page, take identity verification, because it is the hinge on which deposits, withdrawals and self-exclusion all swing.
The first time. A British-licensed operator must obtain and verify a customer's identity before permitting them to gamble — licence condition 17, introduced on 7 May 2019, requiring at minimum name, address and date of birth. In practice most checks run against databases — credit reference agencies, the electoral roll — and take seconds. The anti-money-laundering rules sit underneath: the Money Laundering Regulations 2017 require identification and verification in a remote casino when a customer deposits or withdraws €2,000 or more, counting linked transactions in a single logged-on period. Some operators use a "hybrid approach", verifying age at registration and deferring full verification to the €2,000 threshold — permitted, but scrutinised.
Later. Verification is not a one-off. The Commission expects identity and age checks to be brought forward to before a deposit or a stake, and it has said that onboarding on initials instead of full names, nicknames, or commercial addresses instead of residential ones is not sufficient. Financial vulnerability checks became a licence requirement in August 2024 at £500 net deposits over 30 days, lowered to £150 effective 28 February 2025. Financial risk assessments are coming in stages from 7 July 2026, starting at £5,000 net deposits in a rolling 24 hours for the over-25s — a pattern fewer than 0.5 per cent of customers exceed.
The warning signs. The Commission's 2026 blog gives three: fuzzy matching producing a plausible but wrong match; a document request that appears only at the moment of withdrawal, when condition 17.1.1 says it should have come earlier; and, the one that frightens me most as a matter of harm, a middle name used instead of a forename, which creates a mismatch against records held elsewhere — including GamStop — and quietly undermines the exclusion the player thought was absolute. On an offshore site there is no condition 17 to breach and no one to breach it against. The Commission's 2026 risk assessment of the remote casino sector, rated high risk for money laundering for another year, notes a rise in false documents, deepfake videos and AI face swaps. That is the arms race, and it is being run on the British licence, not off it.
Five Signs an Operator or Service Can Be Trusted
The licence is real, not a seal on a page
Check the register, not the footer. The Commission advises consumers to check that a business holds a British licence and to click through to the public register to see whether the site's activities and domain names match. For Curaçao, click the Certificate of Operation Seal: it must redirect to cert.cga.cw, and if the certificate behind it shows a different domain from the one you are on, the site is displaying somebody else's paperwork. A historic /JAZ number is not proof of anything — the legacy orange certificates ended on 15 October 2025.
The self-exclusion term is stated plainly
An operator worth anything tells you in its own terms what happens if you ask to be excluded, and honours it. In Britain that is settled law: the LCCP requires licensees to close a self-excluded customer's account and return the funds in it, and states it is not sufficient merely to block withdrawals while still accepting wagers. Kahnawake goes further, making its voluntary self-exclusion permanent and irrevocable — and providing that a player who breaches it forfeits funds to a third-party charity. Anjouan requires a named ADR provider in the player-facing terms. What you are looking for is a specific commitment with a mechanism behind it, not a sentence about responsible gaming.
Withdrawal terms fit on one screen
Look for a maximum cashout clause, a maximum bet while wagering, and a list of games contributing nothing. Offshore terms typically carry all three: a cap at a multiple of the bonus, a maximum bet per wager, and zero contribution from live dealer, roulette and craps. On the British side these are prohibited or constrained — no maximum withdrawal limit, no sticky bonus, deposit and bonus balances displayed separately, and the reverse-withdrawal function banned outright since 31 October 2021.
The complaints route is free and outside the company
A disputes process that begins and ends with the operator's own support desk is not a disputes process. British licensees must let customers refer a dispute to a Commission-approved ADR entity free of charge if it is unresolved after eight weeks; the approved list includes IBAS and eCOGRA, and IBAS reports 100 per cent operator compliance with decisions in the consumer's favour in both 2023-24 and 2024-25. Note that ADR providers will not take on customer-service gripes or a refusal to accept a bet, and that 72.3 per cent of eCOGRA's invalid disputes in its 2024-25 report had never been through the operator's internal procedure first.
Someone else is paying for the harm
This is the sign nobody lists and I would put first. British operators pay a statutory levy — introduced by the Gambling Levy Regulations 2025 and commenced on 6 April 2025, at 1.1 per cent of the previous year's gross gambling yield for online operators — which raised just under £120 million in its first year, ringfenced for research, prevention and treatment. That money funds the NHS clinics and the helpline on this page. An offshore site contributes nothing to it, and its business model in this market is partly built on taking customers the funded system is trying to reach.
A Careful Player's Checklist
Six checks, in order, each with a reason. All of them are things anyone can do from a kitchen table.
- Verify the licence on the regulator's own register before registering anywhere. Not the badge in the footer, and not a review site's summary — the Commission's public register, or cert.cga.cw for Curaçao. Reason: a badge is an image file; a register entry is a legal record with a domain attached to it.
- Read the exclusion and account-closure terms before depositing, not after. Find the sentence that says what the operator does when a customer asks to stop. Reason: on an unlicensed site, the moment you most need the wall is the moment you discover there isn't one.
- Pull up the bonus terms and locate three specific clauses: maximum cashout, maximum bet while wagering, and the game contribution table. Reason: those three decide what a bonus is worth, and the gap between 10× and 40× playthrough is the difference between a promotion and a job.
- Check the payout terms for non-negotiables — no maximum withdrawal limit, no reversal facility, deposits held in a separate client account with a published protection rating. Reason: LCCP condition 4.1.1 and 4.2.1 make those disclosures mandatory on a British licence, and their absence tells you which regime you are in.
- Confirm the bank or e-wallet block is switched on and test it. The Commission's list, last updated 16 October 2026, names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds, MBNA, Monzo, NatWest, RBS, Santander and Starling; blocks work at card level, so each card needs activating, and most banks impose a 48- or 72-hour cooling-off before gambling payments resume. Reason: it is the one control that operates whether or not the site cooperates.
- Install blocking software as well, and know which one is free. GamStop signposts Gamban and BetBlocker; BetBlocker states it blocks over 1,368,000 gambling websites and 3,100 apps, requires no registration and is free worldwide, while Gamban is free in Wales but costs £4.99 a month or £29.99 a year in England and Scotland after the TalkBanStop funding ended on 31 March 2026. Reason: software blocks by domain, so it reaches sites that have never heard of any regulator.
One point of fact, because it comes up constantly and gets muddled. Self-exclusion through GamStop holds for its full term — 6 months, 1 year, 5 years, or 5 years with auto-renewal — and then stays in place until the person contacts GamStop to remove it. It cannot be cancelled early, and the Group's 2025 annual report devotes a section to its refusal to remove registrations before the chosen term ends. An offshore casino does not lift it; it simply sits outside it while the registration stays on the record. The same logic runs through the land-based scheme: SENSE's minimum six-month term, extendable to twelve, followed by a six-month "Thinking" period during which removal can only be requested in person at a casino, then a 24-hour cooling-off. The Commission's May 2026 freedom-of-information response put active SENSE exclusions at 12,445 between 1 April 2025 and 1 April 2026, and GamStop Betting Shops — formerly MOSES, telephone-based on 0800 294 2060 — at 9,075 over the same period, across more than 60 operators and roughly 6,000 shops.
If gambling is causing harm, the National Gambling Helpline is run by GamCare on 0808 8020 133, free, 24 hours a day, every day of the year, also reachable by live chat and WhatsApp; callers in Wales can use 0808 2819 265. GamCare is not a crisis line — staff cannot transfer someone at immediate risk and follow their own safeguarding procedures instead. Beyond that: Gamblers Anonymous England, Wales and Ulster on 0330 094 0322, with around 250 meeting locations and no appointment needed; Gam-Anon UK & Ireland for families, at [email protected]; GamFam, a registered charity (No. 1191139) running its GRA5P peer-support programme; the NHS National Gambling Clinic on 020 7381 7722, which takes self-referrals for 13-to-18s anywhere in England and adults in Greater London and the South East; Citizens Advice, free and confidential, including debt help; and Citizens Advice Scotland's Gambling Support Service on 0800 328 1131, Monday to Friday, 10am to 3pm.
Questions About Offshore Casino Safety
Are there any UK casinos not on GamStop?
Not among licensed ones. Every online operator holding a Gambling Commission licence must be part of GamStop under social responsibility code 3.5.5, in force since 31 March 2020, and the Commission suspended two operators' licences in April 2020 for missing that deadline. Any online casino genuinely outside the scheme is therefore outside the British licensing system altogether, whatever flag its parent company flies.
Are casinos not on GamStop UK legal to play at?
They are legal for the player and illegal for the operator. Section 33 of the Gambling Act 2005 makes it an offence to provide gambling facilities without a licence, and it applies to remote gambling where the person providing it knows or should know the facilities are likely to be used in Great Britain. The Commission states this includes operators licensed elsewhere. Consumers commit no equivalent offence.
What is the best uk casino not on gamstop?
I would not answer that, because "best" in this market usually means best bonus, and the bonus is where the terms bite hardest: a 300 per cent maximum cashout clause, a maximum bet while wagering, and live dealer games contributing nothing to playthrough. The honest comparison is not between offshore brands but between regimes, and on every protection that matters — exclusion, stake limits, withdrawal caps, a funded dispute route — the British licence wins. On payouts specifically, there is nothing offshore that a licensed operator cannot now do within 24 hours; 96.3 per cent of 44.2 million withdrawals cleared automatically in the Commission's June-to-September 2024 data.
Do new casinos not on GamStop pay out?
Sometimes, and slowly, and not always in full. Withdrawal delays are the number one subject of complaints to the Commission's Contact Centre, which still received around 2,000 a year on that topic by July 2024, and its 2024-25 annual report recorded that withdrawals remained the biggest source of complaints. Complaints coded "Withdrawals and/or financial transactions" fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025 — on the licensed side, where a regulator is watching. Offshore, the only route is the operator's own process, then a private ADR provider if one is named.
Which payment methods do offshore casinos accept, and does PayPal work?
PayPal appears in a lot of search phrasing, and the answer is duller than the question: on a British licence, condition 5.1.2, effective 31 January 2024, requires payments to be accepted only through a provider that is a payment service provider under the Payment Services Regulations 2017 — which excludes methods designed to sidestep the banking system. Card payments are blocked at the bank for many customers anyway. Where a site will only take crypto or a prepaid voucher, treat that as information about its compliance posture, not about its convenience.
What happens to a GamStop exclusion at an offshore site?
Nothing. The registration stays on the GamStop register for its full term and remains until the person contacts GamStop to remove it; the exclusion cannot be cancelled early. An offshore operator never sees that registration, because it does not query the scheme — it is not a member, and cannot be. Kahnawake illustrates the opposite approach: its voluntary self-exclusion is permanent and irrevocable, and breaching it forfeits deposited and won funds to a charity chosen by the Commission.
Where the Wall Ends
The pitch for a casino not on GamStop is freedom — no exclusion register, no stake cap, no wagering limit — and it is accurate, in the same way that a house with no locks is accurately described as having no lock trouble; what the market calls freedom is the removal of the specific protections that exist because people were harmed without them, and it is worth remembering that GamStop's own register stands at 614,738 people as of July 2026, a majority of whom chose the maximum five-year term, which is not the behaviour of a population looking for a loophole but of one looking for a wall. The wall holds for the full term and then stays until the person asks GamStop to take it down; an offshore site does not knock a hole in it, it simply stands outside it, and the only party who can walk round the outside is the person the wall was built for. That is the whole risk in one sentence, and it is why the numbers that matter here are not bonuses or payout minutes but 2.5 per cent — the share of recent online gamblers the Commission estimates touched an illegal site — and 614,738, the number of people who asked for a wall and, on a licensed site, get one.
For anyone experiencing the problems discussed here, the National Gambling Helpline is on 0808 8020 133, free and open 24 hours a day, every day of the year.