Gambling Sites UK and the Risks of Licensed and Offshore Markets

British gambling sites operate under a Gambling Commission licence, which brings identity checks, a ten-times cap on bonus wagering and cover from GamStop. Sites licensed offshore in Curaçao, Anjouan or Kahnawà:ke carry none of that, and a British player's money and protections sit outside the UK system.

I have spent years reading licence conditions for a living and I have never once been surprised by a casino behaving badly. What still surprises me is how well the British system does on the boring parts, and how quickly the boring parts vanish the moment a player clicks past the licensed market. There are more than 580 illegal gambling websites accessible to British consumers as of September 2026, according to the Gambling Commission's own illegal gambling dashboard, and the regulator's analysis published on 5 November 2026 estimated that among people who had gambled online in the previous four weeks, 2.5 per cent had engaged with one.

That is a small figure with a large sting. Not because those sites take a bigger edge, though some do, but because everything a British licence guarantees simply stops applying: there is no GamStop check, no eight-week complaints clock, no alternative dispute resolution scheme a British consumer can reach for free, no requirement to keep customer funds apart from the operator's own. The harm angle is the whole story here, and it is not a moral lecture. It is arithmetic.

Anyone who has looked for uk gambling sites has noticed how the results blur. A licence seal in the footer, a gambling-themed domain and a payment page are all a site needs to look legitimate at a glance, and nothing on the surface tells you whether the regulator named on that seal has ever met the operator, or whether the seal's verification link still resolves. So the useful exercise is not ranking the market. It is learning which facts are checkable, which claims are hollow, and which of the protections British players assume they have were left behind at the border.

What British Licensed Gambling Sites Actually Guarantee

Two things do most of the work. The first is that the Gambling Commission states plainly that it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a licence from the Commission, including where the operator holds a licence somewhere else. Section 33 of the Gambling Act 2005 is the offence, and it applies to remote gambling if at least one piece of remote gambling equipment used is situated in Great Britain, or if the provider knows or should know the facilities are likely to be used here.

The second is structure. A British licence drags a long tail of obligations behind it, and each one closes a door an offshore operator is free to leave open: identity checks before you gamble, a cap of ten times on bonus wagering requirements since 19 January 2026, a permanent ban on reverse withdrawals since 31 October 2021, credit cards banned for gambling since 14 April 2020, and a requirement to participate in the national self-exclusion scheme since 31 March 2020.

The self-exclusion part deserves precision, because it is the fact most often bent out of shape in this corner of the market. An offshore site is never a way round a GamStop registration, and anyone who says otherwise either does not understand the scheme or is selling something. GamStop, which is often typed "gamestop", blocks a person from signing up for or using online accounts with gambling companies licensed in Great Britain. Registration runs for 6 months, 1 year, 5 years or 5 years with auto-renewal, takes a few minutes to set up and up to 24 hours to take effect, cannot be cancelled during the chosen term, and stays in place after that term ends unless the person contacts GamStop to have it removed. It is not a six-month pause that lapses politely. It is a block that sits there until someone actively lifts it.

What GamStop cannot do is reach the unlicensed market. The Gambling Commission must be capable of regulating the website in question, and it can only regulate sites that trade or advertise to customers in Great Britain under a Commission licence. An operator with no British licence is outside the scheme's obligations, and the regulator's own industry warning notice of 20 January 2025 went further: it said unlicensed websites available to British consumers often target customers who have self-excluded via GamStop. Read that again. The sites that specialise in reaching British players are, in the regulator's own assessment, fishing in the excluded pool.

The protections that fall away are worth naming one by one, because their absence is silent. If a payment dispute arises with an unlicensed operator, the free alternative dispute resolution route is gone: the Commission is a regulator, not an ombudsman, and cannot resolve individual complaints or get money back. The operator's complaints clock, the eight weeks after which a British licensee must let a customer escalate, does not apply. The customer-funds rules do not apply, so there is no separation of player money from business money, no insolvency rating to disclose, no obligation to remind you every six months that your funds are unprotected. And no one is required to check a GamStop registration before allowing a new account.

None of that means every offshore site is a fraud. Some pay out promptly and honour their published terms. The point is a narrower and harder one: the guarantee is not there. On the British market, protection is a condition of the licence. Off it, protection is a matter of the operator's commercial mood.

Where the regulator's own numbers bite

Every claim about enforcement in this area is gossip unless it is dated, so here is one from a named primary source with its period attached. Since April 2024, the Gambling Commission's Illegal Markets team has issued 3,140 cease and desist and disruption notices, comprising 2,032 cease and desist notices, 774 registrar referrals, 402 host referrals and 3 payment provider referrals, and over the same period referred 447,778 Bing and Google URLs, securing 287,961 URL removals. Those figures were published on 21 October 2025.

The interesting part is not the volume. It is the effectiveness ordering, which the Commission published alongside: measuring 160 illegal gambling websites for which traffic data existed, there was an average 32 per cent decrease in engagement after disruption. Registrar blocks and website suspensions each produced a 91 per cent average fall, GEO IP blocking 60 per cent, Bing removal 52 per cent, Google removal 30 per cent and Facebook removal 8 per cent.

So a search-engine removal, the measure that feels most decisive to a person typing a query, is among the weakest tools available. The Commission says as much itself: search-engine removal makes a site harder to find but does not fully block access. If a site disappears from Google and comes straight back under a new domain, that is not the regulator failing to act. That is the nature of the instrument.

What the Numbers Say About Withdrawals

If there is one metric that separates the licensed market from the rest in daily experience, it is not the game selection or the design. It is what happens between the request and the money.

The Commission has published hard figures here. Its data covering June to September 2024, cited in a speech delivered on 6 November 2025, records 44.2 million withdrawals by customers of large online operators in that period. Of those, 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours and 0.1 per cent took up to 48 hours.

That is a strong record, and it is worth saying so before saying the next part. Consumer research on trust published in July 2026 found that 49 per cent of people who had gambled in the past 12 months agreed it is quick and easy to withdraw winnings, with 33 per cent neutral and 18 per cent disagreeing. The gap between 96 per cent clearing automatically and roughly half of players calling payouts quick and easy is not a contradiction, exactly. It is what happens when a small number of bad experiences generate most of the conversation, and when the bad experiences are concentrated at the point of first withdrawal, where verification lands.

The complaints data tells the same story from the other end. Problems with withdrawals from accounts were the number one topic raised by consumers with the Commission's Contact Centre, and by July 2024 the Commission said it continued to receive around 2,000 complaints a year about withdrawal delays, still the top subject of complaints. Its Annual Report and Accounts 2024-25 states that issues relating to withdrawals continue to be the cause of most of the complaints it receives. The coded figure improved: complaints coded "Withdrawals and/or financial transactions" fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025.

One further number, because I think it explains more than the rest. A 2026 Commission blog reported that over a quarter of complaints reaching its Contact Centre concern identity verification, raised by customers who were asked for documents only when they tried to withdraw. That is not an offshore phenomenon. That is a British licensed market failure, and it is the single most common way a UK-licensed operator turns a routine request into an ordeal.

A comparison by payment method, not by brand

This table compares methods, not operators, because brand rankings in this market are advertisements with footnotes. Figures come from the published schedules and scheme documentation in the fact base, and each one is dated as of 13.11.2026.

Two columns in that table matter more than the others. The fee column is where e-wallets quietly lose to bank transfer: a 2.80 per cent charge on a £2,000 withdrawal is £56, against nothing at all through Faster Payments in most cases. And the arrival column is where crypto looks fast and behaves unpredictably. Bitcoin's ten-minute block interval is a target, not a promise: within any ten-minute window the probability of a block being found is about 63 per cent, rising to 95 per cent within 30 minutes.

The variable no method in that table controls, of course, is the operator's own processing. A British licensee is not held to a stated number of days by the licence conditions; the regime relies on the fair-and-open condition, the identity-verification condition and the prohibition on unfair terms rather than a payout deadline. Which is why the Commission says there is no valid reason to delay a payout where it has no regulatory concerns about a customer, and that introducing friction at withdrawal rather than at deposit is not acceptable. That is guidance with teeth, and on 21 October 2026 the Commission announced that one licensee, which runs seven websites, would pay £900,000 in a regulatory settlement for failures including unnecessarily delaying consumer withdrawals.

The Terms That Build In Delay

There is a type of clause that does not steal anything outright. It simply arranges things so that the money arrives later, or not at all, and every one of them is legal offshore.

Start with the general principle, because it is the one thing a careful player can always check: on the British market, operators may not impose any maximum limit on the amount a consumer may withdraw from their deposit balance. The Commission's example of a prohibited term is short and damning: "You may withdraw up to £50 per day and up to £500 per week." That clause does not exist lawfully in the licensed market. Offshore, a maximum cashout clause is standard furniture. One operator in the fact base caps winnings generated with bonus funds at 300 per cent of the credited bonus amount, with any excess voided.

Then there is the clause that only bites once. A term stating that a customer may request only one withdrawal at a time, and cannot request another until the first is authorised, was found unfair under the Consumer Rights Act 2015 in the L & L Europe settlement. So was the manual review of every fifth or tenth withdrawal for some customers, which led to extra information being required before withdrawals were processed. Neither term took a penny dishonestly. Both turned a payout into a queue.

Third, the identity clause, which I consider the most important thing on this page. British rules have been clear for years: a customer's withdrawal request must not result in a requirement for additional information if the licensee could reasonably have requested that information earlier. That prohibition does not prevent an operator from seeking information it must obtain at that moment under another legal obligation, such as anti-money-laundering rules, and there is a real tension there in practice.

Here is how a proper check works now. Since financial vulnerability checks became a licensing requirement in August 2024, starting at a threshold of £500 net deposits over a rolling 30-day period and lowered to £150 from 28 February 2025, the British system has been designed to look at affordability before the money moves, not after. The rules for what such a check may use are narrow: publicly available information about risk flags such as a bankruptcy order, a County Court Judgment, an Individual Voluntary Arrangement, a High Court Judgment, an Administrative Order or a Debt Relief Order. And from 31 October 2025 every gambling business must prompt customers to set a financial limit before their first deposit, present that as the default option, and remind them every six months to review their account information.

So the pattern to watch is a site that asks for nothing when money is going in and everything when money is coming out. That is not diligence. That is a delay wearing diligence as a costume.

Underlying all of it is the money-laundering rule. Under the 2017 Regulations, in remote casinos, identification and verification are required when a customer deposits funds to take part in remote gambling, or withdraws such funds or winnings, amounting to €2,000 or more, and the threshold applies to transactions that appear to be linked, not merely to a single one. Transactions can be linked if they form part of a customer's overall activity during a single logged-on period. That is a sensible rule, and it is also the honest explanation for a lot of the friction people meet. What it does not license is the operator who could have asked at registration and chose to ask at payout.

Five Signs an Operator Can Be Trusted

None of these signs requires an account. All five are checkable in a few minutes, and any one of them failing is worth more than a dozen reassuring paragraphs in a footer.

The licence on the site matches the licence on the register

Ask which regulator, then go to that regulator's own register and look. The Gambling Commission advises consumers to check before gambling that a business holds a British licence, and to click through to the public register to see whether the site's activities and domain names match. Not just the company name. The domain names.

On the Curaçao side, the test has become sharper than it used to be. The Curaçao Gaming Authority issues a Certificate of Operation Seal only for an approved and registered player-facing domain, and clicking it must redirect to cert.cga.cw. If the certificate shown behind the seal displays a different domain name from the website being accessed, the site is displaying a certificate belonging to another operator and should be considered unauthorised or fraudulent. The regulator also warns that a historic /JAZ number or legacy seal must not be treated as independent proof of a current licence.

The seal, if there is one, resolves and the details match

Legacy Curaçao sub-licences, the old "orange" certificates, ended on 15 October 2025, and operators should no longer rely on the former orange certificate as proof of a current licence. Licensing activities ceased for the four former master licensors on dates running from 18 August 2024 to 31 January 2025, and the old private master licensors can no longer grant new licences at all.

Anjouan publishes a comparable mechanism: licence certificates carry a unique licence number and a QR verification code linking to a public register, and certificates that cannot be verified through that register should not be relied upon as evidence of licensing status.

The quick check is therefore brutally simple. Click the seal. If it does not resolve to the regulator's own verification domain, the licence claim has failed the only test that matters. A seal that is an image with no link is not a claim at all.

Terms are specific about the things that cost money

Read the withdrawal section and the bonus section, and count the vague words. British rules require terms setting out promotional play restrictions to specify all prohibited types or patterns of play, and prohibit reserving sole discretion for the operator to decide when play breaches them. Operators should not use terms giving them sole discretion, "may" or "reserve the right", to void or withhold winnings, because the Commission regards such terms as unfair within the meaning of the Consumer Rights Act 2015.

A term that says the operator "reserves the right" to forfeit winnings at its own discretion is a term that has been tested already. One licensee was fined £170,000 in July 2025 for regulatory failures including a bonus term stating that the operator had the right at its own discretion to close accounts or forfeit winnings.

Offshore, look for the numbers rather than the adjectives: a wagering multiplier, a maximum cashout figure, a maximum bet while wagering. Every one of those figures is a lever, and a site that states them plainly is at least being honest about where it stands.

Complaints have somewhere to go, and it is named

A British licensee must let a customer refer a dispute to an approved alternative dispute resolution entity, free of charge, if the complaint is not resolved within eight weeks, and the customer must have gone through the operator's own complaints procedure first. IBAS and eCOGRA have historically handled the majority of gambling disputes, and IBAS's 2024-25 report records 3,721 domestic disputes, with an average completion time of 20 days for domestic cases.

For scale, eCOGRA's report for 1 October 2024 to 30 September 2025 records 911 disputes received, of which "Deposits & Withdrawals" accounted for 150 valid disputes, with an average of 31 days to resolve domestic disputes and 17.8 per cent of completed disputes ruled in favour of the consumer.

The check is one question: which dispute body does the site name, and is that body on the Gambling Commission's published list of approved providers for the relevant sector? Offshore, Anjouan requires licensees to designate an approved ADR provider and list its name and contact details in player-facing terms, with complaints expected to be resolved within 30 days before escalation. Kahnawà:ke employs a full-time Dispute Resolution Officer. A site with no named dispute route has told you what happens when something goes wrong.

Customer funds are described in the terms, not just in the marketing

A British licensee holding customer funds must state clearly in its terms and conditions whether those funds are protected if the business becomes insolvent, the level of protection and the method used, and must pick one of three ratings: "not protected", "medium protection" or "high protection". An operator rated "not protected" must remind the customer once every six months that their funds are not protected, stating the value of funds held.

Note what this does not say. Keeping customer funds in a separate client account does not mean customers get their money back if the operator becomes insolvent, and gambling businesses are legally allowed to hold customers' money in overseas bank accounts. Money staked within an open bet is not treated as customer funds at all, so it is outside any protection arrangement.

The sign of trustworthiness is not a high rating. It is a clear statement of a rating, in writing, acknowledged before money moves. A silence about insolvency is the most expensive silence in the document.

How to Check Any Gambling Site Before You Deposit a Penny

This is ordinary, lawful diligence, and it takes about ten minutes. None of it requires gambling first.

1. Identify the licence holder and the regulator, then verify on the regulator's own register. Look for the company name and licence number in the footer or terms, then open the Gambling Commission's public register, or the Curaçao Gaming Authority's verification domain, and confirm that the trading name and the domain you are looking at appear there. The reason is simple: the domain match is the part fraudsters skip, because copying a company name is easy and registering a matching domain with the regulator is not.
2. Click the seal, if there is one, and read what loads. On Curaçao, the click must redirect to cert.cga.cw, and the certificate must name the domain you are on. On Kahnawà:ke, the Commission's Logo Certificate Program, effective 15 January 2010, lets a player click the Commission's logo to generate a "Certificate of Good Standing" confirming whether that site holds a valid permit. The reason: a broken or mismatched verification link is the single clearest signal available without spending anything.
3. Read the withdrawal clause and the complaints clause before you read the bonus. Find how long the site says it takes to process a withdrawal, what documents it may ask for and when, whether any withdrawal maximum applies, and which ADR body it names. The reason: these are the two clauses that decide what happens when the relationship sours, and they are the two clauses a site with something to hide keeps vague.
4. Work out what the bonus costs in real money and real time. Multiply the wagering requirement by the bonus amount to get the turnover it demands, check the maximum cashout and maximum bet while wagering, and check the game contribution percentages. The reason: a 40x requirement on a £100 bonus is £4,000 of turnover before a penny is withdrawable, and that figure is the actual price of the offer.
5. Decide deliberately whether you want the licence protections, and know what you lose without them. On the British market, credit cards cannot be used for gambling, reverse withdrawals have been banned since 31 October 2021, and a licensed operator must check GamStop. The reason: these are not extras, they are the difference between a system that has a route to a remedy and one that relies on goodwill.
6. If gambling is causing harm, use the help before using the site, and use the tools that actually block. GamStop registration is free and takes minutes. Bank gambling blocks, which decline payments to merchants categorised under gambling Merchant Category Codes, are listed by the Gambling Commission across Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling, and most use a 48-hour or 72-hour cooling-off period before gambling transactions are allowed again. Blocking software is signposted by GamStop: BetBlocker states it blocks over 1,368,000 gambling websites and 3,100 apps, is free worldwide and requires no registration. The reason: a licence check protects your money, and these protect the person.

The Question of Credit Cards, PayPal and Crypto

Three payment questions come up again and again, and each has a British answer that applies nowhere else.

Credit cards are the clearest. The Gambling Commission banned the use of credit cards for gambling with effect from 14 April 2020, adding licence condition 6.1.2 to the Licence Conditions and Codes of Practice. The ban covers all remote gambling licensed by the Commission and non-remote betting, including online betting, online casino and bingo, and lotteries accepting online or telephone payments. Operators must also ensure that where they accept payment from an e-wallet, the money was not loaded from a credit card. There is one odd carve-out: credit cards can still be used to buy lottery tickets and scratchcards from a shop or by post, because the ban does not extend to non-remote lottery operating licences. And the principle goes deeper than payments, since it is an offence under section 245 to supply, install or make available for use a gaming machine allowing payment by credit card.

So a gambling site advertising credit card deposits is either not licensed in Great Britain or not compliant, and both possibilities are worth knowing before an account is opened. This is also the licence condition that most cleanly separates the two markets, because offshore there is no such ban at all.

PayPal is more mundane than the searches suggest. A personal PayPal UK account incurs no fee to withdraw a balance to a bank account when no currency conversion is involved, and withdrawing to a card incurs no fee for UK accounts on the same basis. There is a 0.50 GBP bank return fee if a withdrawal fails because of incorrect bank or delivery details. The real constraint is not PayPal's fee schedule but which operators accept it: British rules under licence condition 5.1.2, effective 31 January 2024, require licensees to accept payment from Great Britain customers only by a method whose provider is a payment service provider within the Payments Services Regulations 2017.

Crypto is where I part company with the enthusiasm. The chains are genuinely fast and their fee schedules are published rather than buried, which is more than can be said for several e-wallets. But a crypto deposit is not a neutral choice, and the Commission's own risk assessment treats the remote casino sector as high risk for money laundering, unchanged from the previous rating, with exposure to flows from higher-risk payment methods including e-wallets, pre-paid methods and funds linked to cryptoassets. It also reports an increase in the scale and sophistication of attempts to bypass customer due diligence using false documentation, deepfake videos and face swaps generated by AI.

The practical consequence is that a crypto-funded account is more likely to meet an enhanced check, and non-face-to-face relationships must, absent safeguards, be treated as high risk requiring enhanced customer due diligence. That is a fair rule with an unfair feel to it, and it is the honest reason a crypto withdrawal can sit for longer than the block time suggests. The chain is not the bottleneck. The compliance queue is.

Offshore Licences, Compared Honestly

Here is where the two markets diverge in law rather than in tone. The Gambling Commission's regulatory remit only allows it to regulate gambling websites which trade or advertise to customers in Great Britain, and those websites must hold a Commission licence. Section 33 applies to remote gambling if at least one piece of remote gambling equipment used is situated in Great Britain, or under the post-2014 wording if the provider knows or should know the facilities are likely to be used here.

Now the licences British players actually meet offshore, in the order of how much the paperwork is worth.

Curaçao has been through a genuine reform, and it deserves to be described accurately rather than dismissed. The National Ordinance on Games of Chance took effect on 24 December 2024, making the Curaçao Gaming Authority the direct licensing and supervisory authority for online gaming, replacing the master-licence and sub-licence model. Operators holding a valid licence when it came into force received a six-month provisional licence by operation of law, due to expire on 24 June 2025, which the regulator extended for a further six months to 24 December 2025, under the same conditions, with full compliance required for a full licence. The fees are published: a one-time non-refundable EUR 4,592 application fee for a B2C licence, and a total annual B2C fee of EUR 47,450, made up of a EUR 24,490 licence fee and a EUR 22,960 supervisory fee, payable in full by 15 January. Supplier licensing becomes fully mandatory from 24 December 2026.

None of that makes a Curaçao licence equivalent to a British one. It does mean the honest verdict has changed from "no regulator" to "a regulator with a shorter rulebook", and the useful check has moved from the seal to the register.

Anjouan is the licence that has grown fastest precisely because it is cheap and permissive. Issuance costs EUR 17,828 one-time, with annual renewal at the same figure and EUR 500 per additional domain. Anjouan Gaming states that Internet Gaming Licences contain no territorial restrictions under Anjouan law, but that licence holders must comply with all applicable laws in the jurisdictions in which they operate, and it stressed in a statement on 10 June 2026 that "An Anjouan Internet Gaming Licence is not, and has never been presented as, a universal authorisation to operate in every country in the world". The regulator's published standards do require segregated player funds, certified random number generators, AML controls and age verification, and it names several approved dispute providers.

The doubts are not hypothetical. An ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around EUR 17,000 per licence per year, and that Comorian financial intelligence officials described Anjouan Corporate Services as operating illegally; the same investigation reported a former attorney-general of the Comoros describing Anjouan Licensing Services as "an illegal entity", and said the AOFA was stripped of its status as a recognised regulator by Comorian banking laws passed in 2013 and 2015. Anjouan Gaming disputes this and points to an independent legal opinion of 19 September 2024, reconfirmed in February 2026, said to confirm the authority's lawfulness — a claim made by the licensee side rather than a regulator, and reported as such.

Kahnawà:ke is the oldest and the smallest. The Kahnawà:ke Gaming Commission was established in 1996 and enacted its Regulations concerning Interactive Gaming on 8 July 1999. It issues an Interactive Gaming Licence held by only one entity at a time, held by Mohawk Internet Technologies since 1999, plus Client Provider Authorizations, and a CPA holder must be hosted in the territory. Its rules are idiosyncratic but sharp: a licensee's relationship with players must be contractual and free of terms that are unfair or unreasonable, sites must let a player set limits including zero, and its own voluntary self-exclusion is permanent and irrevocable. A player who breaches a self-exclusion prohibition forfeits any funds deposited or won to a third-party charity selected by the Commission.

Malta is the licence most often confused with a British one, and the distinction matters. The Malta Gaming Authority states that a B2C Gaming Service Licence is required whenever a Maltese or EU/EEA entity wishes to offer a gaming service from Malta, to a Maltese person, or through a Maltese legal entity. Fees run to a one-time non-refundable EUR 5,000 application fee, a non-refundable fixed annual licence fee of EUR 25,000 and gaming tax of 5 per cent of gaming revenue generated from the service, with minimum issued and paid-up share capital of EUR 100,000 for Type 1 and Type 2 licences. It also publishes a list of Unauthorised URLs and declares it has no connection with those domains, warning that any reference to the MGA or a Maltese licence on them is false and misleading. A Maltese licence is a real licence. It is simply not a British one, and it does not put a site inside GamStop, inside the £5 stake limit for online slots or inside the ten-times wagering cap.

And then there is the honest bottom of the pile: Costa Rica, where there is no comprehensive gambling licensing regime and no formal framework for issuing gambling licences. The "data processing license" sometimes referenced in the industry is not a licence in the strict legal sense. The Legislative Assembly rejected Bill No. 25,057 in early 2026 — the bill that would have introduced a mandatory licensing regime and measures addressing unlicensed and offshore operations. A site describing a Costa Rican entity as its licensed base is describing nothing.

What every one of these jurisdictions shares, and this is the sentence to carry away, is that none of them requires an operator to check GamStop, none of them applies the British protections, and none of them gives the British regulator a lever. That is not a criticism of Curaçao's reform or of Kahnawà:ke's dispute officer. It is a description of the border.

New Sites, Free Spins and the Offers That Cost Nothing

New gambling sites launch constantly, and novelty is doing work in the marketing that it has not earned. Two rules are worth holding onto.

First, a new British-licensed site is bound by exactly the same conditions as an old one from the day it goes live, which is why the British market is a poor place to find "no verification" offers. All online gambling businesses must ask customers to prove age and identity before they gamble, and a customer cannot place a bet until they have been verified. The Commission expects identity and age checks to be brought forward to before a customer deposits or stakes, and it has said that onboarding on incomplete or inaccurate information — initials instead of full names, nicknames, commercial addresses instead of residential ones — is not sufficient.

That last point has a consequence most people miss. Onboarding a customer using a middle name instead of a forename can create mismatches with records held elsewhere, such as GamStop, undermining the effectiveness of self-exclusion. A sloppy registration form is not a minor irritation. It is a hole in the block.

Second, the free-spin offer is the most heavily regulated object in British gambling and the most loosely regulated offshore, and the difference shows in the small print. Since 19 January 2026, licensees are banned from offering mixed-product promotions that require two or more types of gambling, so "bet £5 and get a £5 free bet and 20 free spins" is non-compliant, while "bet £5 to get £10 free bet" is fine. Wagering requirements on bonus funds are capped at a maximum of ten times. The Commission chose a cap over an outright ban, judging that licensees would otherwise be highly likely to introduce terms preventing customers cashing out bonuses, and noted that the limit "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements".

Offshore, that cap does not exist. Published terms in the fact base show a casino applying a 25× wagering requirement, expressed as a multiple either of the bonus amount or of the bonus plus the deposit, with a contribution chart giving slots and specialty games 100 per cent, table games 20 per cent, video poker and blackjack 10 per cent, roulette and baccarat 5 per cent, and craps, live dealer games and jackpot games 0 per cent unless stated otherwise. A 25× requirement sounds gentler than a British 10× cap until you notice that a player who chooses roulette contributes at a fifth of the rate, so the effective requirement multiplies by twenty. That is not a trick exactly. It is a design.

And a caution about ranked lists. Trade coverage of offshore welcome offers describes them typically in the 25x–40x range, and a 2026 comparison table puts welcome-bonus multipliers at 35x to 50x and no-deposit bonuses at 40x to 60x with a €50–€100 cashout cap. Those figures are reported rather than verified against licence conditions, because offshore there are no licence conditions to check them against. Any list that ranks sites without stating the wagering figure, the maximum cashout and the maximum bet while wagering has ranked the advertising, not the terms.

The Market's Size, and the Part of It Nobody Should Cheer

Total Great Britain gambling industry Gross Gambling Yield was £17.5 billion in the year April 2025 to March 2026, a 4.4 per cent increase on the previous financial year, with remote casino, betting and bingo at £8.3 billion, up 6.9 per cent, and land-based sectors at £4.9 billion, up 1.1 per cent. Those are the Gambling Commission's figures, published 17 September 2026.

Now the part that matters more. Market-intelligence firm H2 Gambling Capital estimates the amount staked with illegal gambling operators in the UK reached £16.6 billion in 2025, up from about £5 billion in 2019, with the proportion of gambling happening legally falling from 97 per cent in 2019 to 92 per cent in 2025. Compare that with the Gambling Commission's own survey analysis, which estimates that among respondents who had gambled online in the past four weeks, 2.5 per cent had engaged with illegal gambling websites, with a further 1.5 per cent having done so in the past 12 months.

Two figures, both honest, pointing in different directions. The Commission's measure counts people; H2's counts stakes. And the Commission's own October 2024 methodology for estimating the unlicensed market explicitly notes that it does not capture activity hidden by VPNs, which is a polite way of saying the survey-based figure is a floor rather than a ceiling.

I would not read either number as a verdict on offshore sites being better value. The Frontier Economics study for the Betting and Gaming Council conservatively estimated £2.7 billion staked annually online on the black market, equal to 2.1 per cent of the £128 billion staked with GB regulated remote casino, betting and bingo operators, an industry-commissioned figure with a commercial interest behind it, and the Yield Sec analysis for the Campaign for Fairer Gambling put the GB online gambling market at £8.8 billion GGR in 2025, split 91 per cent regulated and 9 per cent unregulated. Every number in this paragraph has a sponsor. That is worth knowing before quoting any of them to win an argument.

What none of the sponsors dispute is the harm question. The third annual Gambling Survey for Great Britain, published 16 July 2026 and based on 20,775 adults aged 18 and over with fieldwork between January 2025 and January 2026, found that 2.4 per cent of participants had a Problem Gambling Severity Index score of 8 or more, 3.5 per cent scored 3 to 7 and 7.8 per cent scored 1 to 2. The PGSI 8+ figure has been stable across three survey years: 2.5 per cent in 2023, 2.7 per cent in 2024 and 2.4 per cent in 2025. And 3.4 per cent of those who had gambled in the past 12 months had sought support because of their own gambling.

Roughly one in forty adults at the severe end, holding steady through three annual surveys, in a market that has been regulated harder each year. The unlicensed market is where those protections are thinnest, and the regulator's own warning notice says plainly that such sites often target people who have self-excluded via GamStop. That is the finding I keep coming back to, because it is the one where the commercial interest and the harm interest point in exactly the same direction.

Where Help Is, and What It Costs

Self-exclusion first, because it is free and it works. GamStop is the UK's national online self-exclusion scheme, provided free of charge to users, run by The National Online Self Exclusion Scheme Limited. Registration blocks a person from gambling with all online gambling companies licensed in Great Britain for 6 months, 1 year, 5 years or 5 years with auto-renewal. Signing up takes a few minutes and it can take up to 24 hours for the block to become effective.

The terms are worth stating exactly, because they are stricter than most people expect. Once registered, a person cannot cancel or deactivate the registration during the exclusion period, and the exclusion stays in place after the end of the chosen period unless the person contacts GamStop to remove it. Only during the last six months of a five-year minimum exclusion period may the auto-renewal option be turned off, and auto-renewal continues for up to four new five-year periods. If the registration is not deactivated after the chosen period, GamStop holds the data through a further automatic seven-year self-exclusion period during which operators are told the person was previously excluded. The figures show how many people want exactly that: GamStop reported 614,738 consumers currently on the register as of July 2026, of whom more than one in two had opted for the maximum five-year exclusion, while across all age groups only one in four had self-excluded for six months. Registrations were running at 117,756 during 2025 and a 16 per cent year-on-year increase in the first half of 2026, with May 2026 setting a new monthly record of 12,236 sign-ups.

And once more, because it is the sentence that gets repeated wrongly elsewhere: an offshore site is never a route around a GamStop registration. The Gambling Commission's own warning notice of 20 January 2025 said unlicensed websites available to British consumers often target customers who have self-excluded via GamStop. A site that appears to offer a way back in is not offering a service. It is offering the risk you already decided to remove.

Land-based gambling has its own schemes, which matters because the online register does not cover a betting shop or a casino floor. All non-remote operators who are premises licence holders in the arcade, betting, bingo and casino sectors must participate in a multi-operator self-exclusion scheme, and separate schemes exist: SENSE for licensed land-based casinos with a minimum six-month exclusion extendable to twelve, Gamstop Betting Shops — previously MOSES — for multiple land-based bookmakers, run by the not-for-profit Multi-Operator Self Exclusion Scheme Ltd, and schemes for arcades and bingo clubs run by their trade bodies. Gamstop Betting Shops covers over 60 operators and approximately 6,000 shops.

Alongside exclusion, there are bank blocks, which are the most underused tool in this entire area. The Gambling Commission's list of banks offering a gambling blocking service, last updated 16 October 2026, names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling. These blocks decline payments to merchants categorised under gambling Merchant Category Codes, cover online casinos, betting websites, gaming apps and physical gambling venues, and are applied at card level, so they must be activated on each card. Most use a cooling-off period of either 48 or 72 hours before gambling transactions are allowed again after a block is switched off, and blocks do not affect your credit score.

Then there are the services for the person, free at the point of use. The National Gambling Helpline is operated by GamCare on 0808 8020 133, available 24 hours a day, every day of the year, and the same number reaches the Helpline via live chat and WhatsApp; callers in Wales are given 0808 2819 265 alongside it. BeGambleAware is the public-facing brand of the charity GambleAware, which directs people to the National Gambling Helpline on 0808 8020 133 or its online chat. GamFam, a registered charity set up by people affected by the gambling of family members and friends, runs a structured five-stage peer-support programme called GRA5P. Gamblers Anonymous England, Wales & Ulster can be reached on 0330 094 0322 and runs around 250 meeting locations with no appointment needed. Gam-Anon UK & Ireland supports the family and friends of compulsive gamblers. Citizens Advice offers free confidential advice including help with debt, and Citizens Advice Scotland runs a gambling support service advice line on 0800 328 1131, Monday to Friday 10am to 3pm. In England, NHS England had opened 15 specialist gambling clinics across England since 2019, and integrated care boards commission 8 regional NHS gambling services receiving almost 5,000 referrals a year. The money behind much of this is now structural rather than voluntary: the statutory levy commenced on 6 April 2025, charges 1.1 per cent of previous-year Gross Gambling Yield for all online operators, and raised just under £120 million in its first year, ringfenced solely for research, prevention and treatment.

The National Gambling Helpline, 0808 8020 133, is not a crisis line, and it is worth saying so plainly. Staff cannot transfer callers at immediate risk of harm and instead follow their own safeguarding procedures. If someone is in immediate danger, the helpline is not the right call.

Frequently Asked Questions

How many online gambling sites are there in the UK?

The Gambling Commission does not publish a running total of licensed domains, and the honest answer is that nobody should trust a round number. What is countable is the licensed population's regulator, the register that lists it, and the opposite side: the Commission's illegal gambling dashboard recorded 586 illegal gambling websites accessible to GB consumers identified in September 2026, 4 per cent more than September 2025. Of those, 311 had disruption actions taken against them in Quarter 2 of 2026 to 2027 and 77 per cent saw a reduction in estimated traffic.

What are the best gambling sites in the UK?

I do not rank operators, and I would be suspicious of anyone in this market who does it for money. What can be ranked is criteria, and the order matters: a licence verifiable on the regulator's register with a matching domain, withdrawal terms that state a processing time and any maximum, a named ADR provider on the approved list, and a wagering requirement stated as a number. A site that publishes those four things is doing more for a player than a hundred pages of review copy.

Are there gambling sites that are not on GamStop?

Yes, and every one of them is unlicensed in Great Britain, because participation in the national self-exclusion scheme has been a licence condition since 31 March 2020. Sites licensed only offshore are outside GamStop, which is why the Gambling Commission's warning notice of 20 January 2025 said such sites often target customers who have self-excluded. A site that is not on GamStop has not found a loophole. It has told you where it stands.

Which gambling sites accept credit cards in the UK?

None that hold a Gambling Commission licence for remote gambling, since the ban took effect on 14 April 2020 under licence condition 6.1.2, and operators must also make sure that money reaching them through an e-wallet was not loaded from a credit card. The one exception is non-remote lottery operating licences, where credit cards can still be used to buy tickets and scratchcards from a shop or by post. A site advertising credit card deposits is not licensed here.

How do I get money back from a gambling site in the UK?

Complain to the operator first, and keep the dates. If the dispute is not resolved within eight weeks, a British licensee must let you refer it to an approved alternative dispute resolution entity free of charge. IBAS's 2024-25 report records 3,721 domestic disputes averaging 20 days to complete, with 100 per cent operator compliance with decisions in the consumer's favour in both 2023-24 and 2024-25. The Gambling Commission cannot get money back for you; it is a regulator, not an ombudsman.

What does it mean if a site offers no verification or no documents?

For a British-licensed operator it means non-compliance, because identity and age checks must come before a customer stakes, and the Commission has said onboarding on initials, nicknames or commercial addresses is not sufficient. Offshore, "no verification" usually means the operator has skipped both age assurance and anti-money-laundering controls, and non-face-to-face relationships must absent safeguards be treated as high risk. Cheating is an offence under section 42 whether or not the site's own checks exist.

The Border Is the Whole Story

Everything that separates a British gambling site from an offshore one comes down to a single question — whether an operator has an incentive to keep a licence it could lose — and the numbers that follow from that question are not ambiguous: 96.3 per cent of 44.2 million withdrawals clearing automatically at large licensed operators, a ten-times cap on bonus wagering that offshore terms of 25x to 60x sail past, 586 illegal websites identified in September 2026 and 3,140 disruption notices since April 2024, and one in two GamStop registrants choosing the full five years. All of it rests on a register anyone can read in ten minutes, and none of it follows a player across the border. If gambling stops being a pastime, the National Gambling Helpline on 0808 8020 133 is free, day or night — and on the licensed market it is not the only line still open.