Casino Sites Not on GamStop and What Protects a Balance

Casino sites not on GamStop are licensed outside Great Britain, usually in Curaçao, Anjouan, Malta or Kahnawà:ke, and are not covered by the self-exclusion scheme because it binds only Gambling Commission licensees. The UK protections that guard a balance — fair-terms rules, the reverse-withdrawal ban, funds-protection ratings — do not reach them, and no operator can licence itself around UK law.

The promise in this keyword is speed. Offshore sites sell it relentlessly: a payout in minutes, no friction, no questions, no three-day limbo while a documents team debates the top of a bank statement. It is a real promise, and it is worth taking seriously, because the delays people complain about most loudly are delays that British-licensed operators built into their own terms and were then told off for. The Gambling Commission's Contact Centre fields over 6,000 calls a year, and problems with withdrawals remain the single biggest topic raised; by July 2024 it was still absorbing around 2,000 complaints a year about withdrawal delays, and its Annual Report for 2024-25 admitted that withdrawal issues continued to cause most of the complaints it receives.

So the selling point is not invented. What is invented is the assumption that speed arrives on its own, without a trade. Every offshore site handling British customers is doing something the Gambling Act 2005 makes an offence for the operator: section 33 prohibits providing gambling facilities without an operating licence, and the Commission states plainly that this applies even where the operator holds a licence somewhere else. Nothing here is a loophole, and no offshore site is a way round an exclusion. It is a market with a different balance sheet of protections, and the sensible work is to see exactly what has been swapped for what.

Beneath the headline figure sit the things that decide whether a balance is actually retrievable: whether the licence can be checked on a public register, whether the terms cap a withdrawal, how long a self-exclusion runs, and who — if anyone — will adjudicate when something goes wrong. As of 13.11.2026, the pattern is consistent enough to describe.

Best Casino Sites Not on GamStop and the Measure That Survives Scrutiny

Ask for the best and you get a list of brands, which is useless and also not something this page does. Ask a better question — best at what? — and one measure survives: the time between a withdrawal request and money that can be spent. Not advertised time. Recorded time.

Here the UK benchmark is the first surprise. Gambling Commission data covering June to September 2024, cited in a speech delivered on 6 November 2025, records 44.2 million withdrawals by customers of large online operators, of which 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours and 0.1 per cent took up to 48 hours. Earlier Commission data from some of the largest companies showed around 99 per cent of requests approved, processed and fulfilled within 24 to 48 hours. That is a high bar, publicly set and publicly measured, by the regulated market.

Which leaves offshore sites competing on a margin they have to earn differently. The Cypriot, Caribbean and Indian Ocean licence holders that accept British players generally clear crypto withdrawals fast — sometimes in minutes — because a blockchain confirmation does not care about a compliance queue. Card and bank payouts are slower, because those rails are slower, and because the operator on the other end may be doing its checks at the worst possible moment: after the win.

Read the two right-hand columns together and the honest picture appears. The clock is set by the payment rail, and the terms are set by the operator. A site can tell the truth about rails and still bury the bit that matters in clause 14 — that the first crypto withdrawal triggers a full identity check, that a single withdrawal may be requested at a time, that winnings from a bonus are capped. Those are not rail problems. They are choices, and in the UK some of them are now unlawful choices.

New Casino Sites Not on GamStop and Their Fresh Licences and Thin Records

A newly launched offshore site has no complaints history and no enforcement record, which is precisely why it can promise more than an established one. That is not snobbery; it is arithmetic. There is nothing to check.

The mechanics are worth knowing because they explain the churn. Curaçao replaced its old master-licence and sub-licence model with direct licensing by the Curaçao Gaming Authority under the National Ordinance on Games of Chance (LOK), which took effect on 24 December 2024. The legacy "orange" sub-licence certificates of operation ended on 15 October 2025, and the CGA says an old /JAZ number or legacy seal must not be treated as proof of a current licence. Its licensing activities for the four former master licensors ceased on staggered dates between 18 August 2024 and 31 January 2025. Provisional licences granted by operation of law were extended to 24 December 2025; suppliers face mandatory registration from 24 December 2026.

Anjouan is the market's cheaper door. Its published fee schedule is EUR 17,828 for a B2C licence, one-time, with the same annual renewal and EUR 500 per extra domain. Kahnawà:ke, which has regulated interactive gaming since its 1999 Regulations and describes itself as one of the longest-serving regulators, charges far more — from 1 January 2027 a Client Provider Authorization application is USD 40,000, with the annual fee unchanged at USD 20,000.

What that price gap buys is not obvious to a player, and the honest answer is: not much that can be verified from a laptop. Newness is a signal about the operator's appetite for risk, not a guarantee about its behaviour. Treat a three-month-old site with the anonymity of a stranger, because that is what it is.

How to Read a Licence Properly

The phrase "UK casino sites not on GamStop" describes an impossibility: a site regulated by the Gambling Commission must be part of the scheme. Since 31 March 2020 every online operator has had to participate as a licence condition, sitting in the Commission's Licence Conditions and Codes of Practice at social responsibility code provision 3.5.5 — "Licensees must participate in the national multi-operator self-exclusion scheme". Operators were notified in January 2020. From April 2020 the Commission required all operators to check their entire customer base against the register at least every 24 hours, which also stopped registered people receiving direct marketing. On 3 April 2020 it suspended the licences of two operators, an operator and Sportito, for missing the deadline.

So "not on GamStop" means "not British-licensed", full stop. The competent checks are therefore about the licence that is actually claimed.

Curaçao issues two seals, and confusing them is the commonest way a site misleads without quite lying. A Certificate of Operation Seal goes only to B2C operators and only for an approved, registered player-facing domain. A License Certificate Seal is available to both B2B and B2C entities and is not domain-specific. Clicking a Certificate of Operation Seal must redirect to cert.cga.cw; if the seal differs in design, colour or format, the CGA says the site is not authorised by it. And if the certificate behind the seal names a different domain from the one being visited, the certificate belongs to somebody else.

Since 7 October 2026 the CGA's previous online portal has not been returning to service, and it is working on a replacement way to verify licensed domains because the old digital seal may be affected by the transition.

Anjouan's certificates carry a unique licence number and a QR code linking to a public register, and the authority itself states that certificates which cannot be verified through that register should not be relied upon. Kahnawà:ke runs a Logo Certificate Program, effective since 15 January 2010, which generates a Certificate of Good Standing for a site that holds a valid permit — a fully checkable claim, and one worth testing.

The one fact that should sit above all of this: an unconfirmed trade description holds that offshore sites with no UK licence are not connected to GamStop and are not covered by it, since the obligations apply only to UKGC licensees. It is reported to be the case, and it is consistent with the scheme's own terms of use, which can only exclude from participating operators.

Identity Checks and Where the Fast Payout Goes to Die

If this market turns on one thing, it is the timing of the identity check. Everything else — licence, seal, terms, rail — is downstream of when the operator decides to ask who you are.

Here the UK standard is unusually clear, and unusually inconvenient for anyone selling offshore frictionlessness. Licence Condition 17 has required, since 7 May 2019, that licensees obtain and verify information establishing a customer's identity before that customer is permitted to gamble, and the Commission expects checks brought forward to before a deposit or stake rather than left to the withdrawal. Where an operator has run the checks properly, a withdrawal request cannot be met with a demand for fresh documents the licensee could reasonably have requested earlier — Licence Condition 17.1.1 — unless a separate legal obligation such as anti-money-laundering rules bites at that moment.

Offshore rules commonly work the other way. Under the UK's money-laundering regulations, remote casinos must identify and verify at €2,000 of deposits or withdrawals, and the threshold applies to linked as well as single transactions. Offshore regimes often adopt something similar, and a "hybrid approach" is permitted even in the UK for remote casinos — age and identity at registration, full verification deferred to the threshold. It is a legitimate structure. It is also the structure that produces the pattern British players describe most bitterly: months of unremarkable play, a large win, then a document request that stops the money.

The first-time experience and the later one diverge sharply. Frictionless verification matches the account against credit reference data and the electoral roll, and often needs no paperwork at all; the Commission notes operators can often verify by database rather than documents, and that it cannot give a timescale because the process varies. A passport, driving licence or household bill is the usual fallback, with a selfie where fraud is suspected and bank statements where source of funds is in question.

Warning signs to watch for, in order of severity:

• Documents demanded only at withdrawal. Over a quarter of the complaints reaching the Commission's Contact Centre concern identity verification raised at exactly that point, and it is one of the most common dispute types reaching adjudicators. In the UK, it can breach Licence Condition 17.
• Partial onboarding accepted. A site that lets an account be opened with initials, a middle name or a commercial address has not verified anyone. The Commission has flagged "fuzzy matching" through third-party providers as a specific concern, and a name mismatch can also defeat a self-exclusion check entirely.
• Verification outsourced and unpriced. If the operator will not say which documents it needs, in what circumstances and in what form — a thing UK licensees must tell customers before they deposit — expect improvisation later.
• Funds confiscated over documents. The Commission and the Competition and Markets Authority are both clear that a deposit balance cannot be confiscated because a customer has failed identity or age verification. An offshore site is not bound by that, but a site that does it has told you what it is.
• A withdrawal that can be cancelled. Reverse withdrawals have been banned for UK remote operators since 31 October 2021 under RTS requirement 14B: consumers must not be given the option to cancel a withdrawal request. Offshore, the option survives — and the temptation it creates is the reason the ban exists.

Five Signs a Site Can Be Trusted

The licence can be verified on a register, in your own browser

Not a badge graphic. A live check. Clicking a Curaçao Certificate of Operation Seal must redirect to cert.cga.cw, and the certificate must name the domain being visited. Anjouan certificates carry a unique number and a QR code pointing at its public register, and the authority says unverifiable certificates should not be relied upon. Kahnawà:ke's Logo Certificate Program produces a Certificate of Good Standing on a click. The quick check is the same each time: follow the seal to the register and match the domain.

The withdrawal terms carry no ceiling and no single-request rule

Look for a maximum cashout clause on bonus winnings, and for language restricting how many withdrawals may be requested. Both exist offshore: one operator caps withdrawable winnings generated with bonus funds at 300 per cent of the credited bonus, voiding the excess. The British position is that no maximum limit may be imposed on what can be withdrawn from a deposit balance, and in October 2026 the Commission announced a £900,000 regulatory settlement with an operator whose failures included a term allowing only one withdrawal at a time, found unfair under the Consumer Rights Act 2015. The quick check is the withdrawal section of the terms, read before the first deposit.

Wagering requirements sit in single figures, and only on the bonus

The Commission capped wagering at ten times from 19 January 2026, having found some licensees applying up to 60 times, and barred mixed-product promotions from the same date. Offshore offers run higher: 25 times to 40 times on welcome bonuses is typical in trade coverage, with no-deposit bonuses sometimes at 40 times to 60 times against a capped cashout. The quick check is whether the multiplier attaches to the bonus alone or to bonus plus deposit — the CMA has long considered wagering unfair-looking only when it attaches to the deposit too.

Customer funds are rated, separately held, and the rating is written down

UK licensees must hold customer funds in a separate client bank account, pick one of three insolvency ratings — not protected, medium protection or high protection — state which applies in their terms, and put the rating in the customer disclosure acknowledged before funds are used. An operator rated not protected must remind the customer every six months, stating the value held. Offshore, segregation is promised by some regulators, including Anjouan's published standards, but the rating framework does not travel, and a separate account is not a guarantee of return if the business fails.

There is a named adjudicator, and a real complaints clock

Kahnawà:ke employs a full-time Dispute Resolution Officer. Anjouan requires licensees to appoint an approved alternative dispute resolution provider and publish its details, with complaints to be resolved within 30 days before escalation. The UK route requires referral to an approved ADR entity free of charge if a dispute is not settled within eight weeks. The quick check is whether the site names the adjudicator, its jurisdiction and the time limit — and whether that adjudicator will even take the case, since the approved providers generally refuse disputes that have not been through the operator's own process first.

How to Judge an Offshore Site Before Depositing

1. Follow the licence seal to its register and match the domain. This is the only step that separates a licensed operator from a decorative badge. Confirm the seal redirects where it should and that the certificate names this site, not a sibling.
2. Read the withdrawal clause, the bonus clause and the terms-of-use date, in that order. The withdrawal clause governs the money; the bonus clause governs the winnings; the date tells you whether anyone has touched it since the licence regime changed.
3. Check the wagering multiplier and the payment-contribution table. A high multiplier is survivable. A table that scores roulette and live dealer at zero or five per cent is not — it means an unglamorous grind on a narrow set of games.
4. Test the small withdrawal before the large one. A request for a modest sum reveals the full pipeline — verification, approval, rail — at a cost the operator cannot pretend is suspicious.
5. Set a deposit limit and a session reminder at the site, and a bank-level gambling block on the card behind it. Bank blocks decline payments at gambling Merchant Category Codes and cover online casinos, betting sites and gaming apps; they sit at card level, so each card needs its own. Switching one off usually triggers a 48-hour or 72-hour cooling-off, and it does not touch a credit score.
6. Write the paper trail on day one. Keep the terms version you accepted, the licence number and register check, and the withdrawal confirmation. If a dispute goes to an adjudicator, the site's own terms are the evidence.

None of that requires a VPN, a false name, or a second account. Each of those turns a payment dispute into a fraud question, which is a worse position than a slow withdrawal.

Self-Exclusion Holds, Whether or Not the Site Agrees

A Gamstop Online registration blocks you from gambling with every online company licensed in Great Britain for six months, one year, five years or five years with auto-renewal. It takes a few minutes to set up and up to 24 hours to become effective. Once registered, the exclusion cannot be cancelled or deactivated during its term, and it stays in place after the chosen period ends until the person contacts Gamstop to remove it — registrations cannot be removed early, and the Group's 2025 annual report devotes a section to its refusal to do so. That is the whole point of it.

The name itself is worth a line. It is often typed "gamestop", a slip the word "game" invites, though the scheme is GamStop — and the scheme is now called Gamstop Online, following a November 2025 rename that also turned the betting-shop scheme formerly known as MOSES into Gamstop Betting Shops.

The scale is not trivial. Gamstop recorded 117,756 new registrations during 2025 and reported 562,000-plus people actively excluded at the end of that year, including 58,675 registrations in the final six months — an average of 319 a day. Registrations rose 16 per cent year on year in the first half of 2026, with May 2026 setting a monthly record of 12,236 sign-ups, and by July 2026 the register held 614,738 people, more than one in two of whom had chosen the maximum five-year term. Under-25s accounted for nearly one in three exclusions in that half-year, up 26 per cent.

Land-based exclusion runs on separate schemes. SENSE covers licensed land-based casinos, with a minimum six months extendable to twelve and removal only in person at a casino during the six-month "Thinking" period, followed by a 24-hour cooling-off. Gamstop Betting Shops covers bookmakers' shops on a fixed twelve-month term that cannot be ended early. Neither is interchangeable with the online scheme, and none of them reaches an offshore site.

Where to get help, plainly: the National Gambling Helpline is run by GamCare on 0808 8020 133, free, 24 hours a day, every day. BeGambleAware directs people to the same line and to online chat. GamCare provides information, advice and support across England and Scotland, plus a peer-support chatroom. Gamblers Anonymous England, Wales and Ulster can be reached on 0330 094 0322 with around 250 meeting locations and no appointment needed, and its line is open 7:30am to 10:30pm daily. GamFam (charity No. 1191139) supports families through its GRA5P peer programme. Citizens Advice Scotland runs a gambling support advice line on 0800 328 1131, weekdays 10am to 3pm. NHS gambling treatment has expanded considerably — 15 specialist clinics opened across England since 2019, with nearly 2,000 referrals between April and September 2024.

What protects a balance offshore, in the end, is not a licence category, a badge or a payout promise. It is a named adjudicator, a written term without a ceiling, a verified register entry, and a withdrawal small enough to test. Everything else is marketing copy with a countdown timer on it.

Pay by Phone and PayPal and Two Payment Names That Rarely Fit

Two payment phrases attach themselves to this keyword, and both deserve a straight answer rather than a shrug.

Pay by phone casino sites not on GamStop are largely a matter of what "phone" means. Where it means paying from a mobile phone bill through a carrier billing arrangement, the operator needs a mobile payment provider willing to carry gambling transactions — and that provider is almost always a regulated payment service provider, which brings the transaction back into the regulated perimeter. Where "pay by phone" simply means using a phone browser with a card or e-wallet, the phrase tells you nothing at all about licensing. UK licensees must, under licence condition 5.1.2 effective 31 January 2024, accept payment from Great Britain customers only by a method whose provider is a payment service provider within the Payment Services Regulations 2017. That is a real constraint. Offshore, it does not apply, and neither does the credit card ban that has applied to UK remote gambling since 14 April 2020 — which means an offshore site taking credit card deposits is doing something a British licensee cannot.

PayPal casino sites not on GamStop run into the same wall from a different direction. PayPal is a payment service provider, and its gambling merchant policies are its own; where it is accepted at all, it is overwhelmingly at licensed operators inside regulated markets. A personal PayPal account charges nothing to withdraw a balance to a UK bank account where no currency conversion is involved, so the rail itself is cheap — but cheapness is irrelevant if the merchant category is refused in the first place. The practical consequence is that well-known e-wallets do the heavy lifting offshore: Skrill and Neteller both charge 2.80 per cent on a bank withdrawal with a minimum of EUR 3.50 or USD 3.50 from 12 January 2026, and both deduct a monthly service fee after six months of inactivity. MiFinity charges 1.8 per cent for cryptocurrency withdrawals, and €1 for a VISA EEA withdrawal; it goes inactive after twelve months without a login, then deducts €1 a month.

None of these fees is the real cost. The real cost is the one nobody quotes: what happens to a balance when the operator's own terms decide it belongs to them. LCCP licence condition 7.1.1 requires UK licensees to ensure terms are not unfair within the meaning of the Consumer Rights Act 2015, and the Commission's guidance says operators should not rely on terms giving them sole discretion — "may" or "reserve the right" — to void or withhold winnings. That sentence is the single most valuable protection in British gambling terms and conditions, and it stops at the border.

What the Regulator Actually Does About Unlicensed Sites

It is fashionable to say nothing happens. Something does, and the numbers are unflattering to the sites.

Since April 2024 the Commission's Illegal Markets team has issued 3,140 cease and desist and disruption notices — 2,032 C&Ds, 774 registrar referrals, 402 host referrals and 3 payment provider referrals — referred 447,778 Bing and Google URLs, and secured 287,961 removals. Across 160 illegal gambling websites with traffic data, engagement fell by an average of 32 per cent after disruption. The method matters more than the volume: registrar blocks and website suspensions produced the largest average fall in engagement at 91 per cent each, ahead of GEO IP blocking at 60 per cent, Bing removal at 52 per cent, Google removal at 30 per cent and Facebook removal at 8 per cent. Removing a site from search makes it harder to find; it does not stop anyone reaching it.

The tempo has risen. In July to September 2026 the Commission referred 1,835 websites and issued 546 cease and desist notices. In April to June 2026 it began zero criminal investigations, and across April 2025 to March 2026 every quarter recorded 0 or 1 prosecutions commenced, a total of one. That gap between disruption and prosecution is the honest shape of enforcement: it is administrative warfare, not policing.

Scale is contested, and the contest is instructive. The Commission's own analysis, published 5 November 2026, estimates that across the whole population 0.6 per cent of respondents engaged with illegal gambling websites in the past four weeks; among those who had gambled online in the past four weeks, 2.5 per cent. H2 Gambling Capital puts the amount staked with illegal operators in the UK at £16.6 billion in 2025, up from about £5 billion in 2019. A Frontier Economics study for the Betting and Gaming Council conservatively estimated £2.7 billion staked annually online on the black market. Yield Sec analysis for the Campaign for Fairer Gambling put the GB online market at £8.8 billion GGR in 2025, split 91 per cent regulated and 9 per cent unregulated. Those figures cannot all be right in the same units, because they are not in the same units.

One Commission finding deserves a plain sentence. Its industry warning notice of 20 January 2025 said casino games supplied by licensed operators were appearing on unlicensed websites available to GB consumers, and that such sites often target customers who have self-excluded via GAMSTOP, and may have inadequate social responsibility and AML controls. That is the market the keyword points at, described by the regulator itself.

The True Cost of Switching Regimes

The clearest way to see it is the bonus rule. From 19 January 2026 the Commission capped wagering requirements at ten times and banned mixed-product promotions, applying to all licences except gaming machine technical and gambling software licences. Offshore, a welcome offer at 25 times to 40 times is ordinary, and no-deposit bonuses at 40 times to 60 times with a capped cashout are common. A maximum bet while wagering, a thirty-day expiry, a contribution table that scores roulette at five per cent — each of those is a term doing the same job as a wagering multiplier: keeping the money.

The table below compares the two regimes by criterion rather than by brand, which is the only comparison worth printing.

Anatomy of a Typical Bonus Offer

Take a single no-deposit bonus and follow the money, because that is where the arithmetic bites.

A ten-unit free chip is not ten units of anything until a multiplier, a maximum bet rule, a game-weighting table and a cashout ceiling have all been applied. Offshore terms commonly run the multiplier at 40 times to 60 times on a no-deposit award, cap the cashout at a fixed sum, restrict wagering bets to a low ceiling per spin, and disqualify whole game categories from contributing. One operator reserves the right to limit the amount withdrawable from winnings generated with bonus funds, including free spins and cashback, to 300 per cent of the credited bonus, voiding the excess; another states that all bonuses carry a maximum bet restriction relative to the deposit, at 20 per cent of the deposited amount per wager, with breach potentially meaning account closure, forfeiture of the bonus and forfeiture of winnings.

The British version of that same clause would be unenforceable. Commission guidance holds that deposit and bonus balances must always be displayed separately, that wagering requirements must not apply to play with a deposit balance, and that players must be allowed to withdraw their deposit balance at any time, including while a bonus is pending or active. Terms reserving sole discretion to void winnings are treated as unfair. Sticky bonuses — where the bonus can be wagered but never withdrawn — survive offshore and are effectively killed in Britain by those rules.

There is one more clause class to read: bonus abuse. Offshore terms describe prohibited play as low-margin, equal or zero-risk bets, switching from a low-weighted game to a high-weighted one after a large win, and deferring free spins or bonus features until wagering is met. Anything vague there is dangerous, because the operator decides what it means. British guidance requires promotional play restrictions to specify all prohibited types or patterns of play and forbids leaving the judgement to the operator's sole discretion.

The One-Number Version of the Risk

If a single figure had to carry the argument, it is the ceiling.

Under Kahnawà:ke rules, a player who breaches a self-exclusion prohibition forfeits any funds deposited or won, to a third-party charity selected by the Commission. That is a real, written rule from a real regulator, and it is the clearest illustration of what an offshore balance is: money held under contract, not money held in a regulated relationship. It also shows how much turns on which regime is chosen, because Kahnawà:ke is not the loosest of the options — it requires a licensee's relationship with players to be contractual and free of unfair terms, requires sites to let a player set limits including zero, and employs a full-time Dispute Resolution Officer.

At the other end sits Costa Rica, which operates no comprehensive gambling licensing regime at all. Its Legislative Assembly rejected Bill No. 25,057 in early 2026, a bill that would have introduced mandatory licensing and addressed unlicensed operations. The "data processing licence" sometimes cited in the industry is not a licence in the strict legal sense. Under Costa Rican law, games of chance where the outcome depends primarily on luck are generally prohibited, and only land-based casinos integrated into qualifying hotels are authorised. A site claiming a Costa Rican licence is describing nothing.

Then there is the paperwork that follows a license out of the market. The Commission reported in May 2025 that TGP Europe was leaving the GB market following an investigation, that sites it operated were now unlicensed and might not provide protections against criminality or gambling-related harm, and that it had contacted five football clubs about sponsorship arrangements with unlicensed gambling businesses.

Judgements Worth Making

Judgements, then, rather than a list.

A Curaçao licence obtained properly after the LOK reforms is a real licence from a real authority with a checkable seal — better than the legacy certificate it replaced, and the CGA's own insistence that an old /JAZ number proves nothing is a healthy sign from a regulator. An Anjouan licence is a licence from a jurisdiction fighting a reputational war; the authority's statement of 10 June 2026 that its licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world" is honest, and honest regulators are rarer than generous bonus offers.

What is hollow is the claim that an offshore licence makes a site equivalent to a British one. It does not, and the difference is not a matter of opinion: no self-exclusion, no wagering cap, no ban on reverse withdrawals, no unfair-terms enforcement, no funds-protection rating, no free approved adjudicator. Whether that trade is worth a faster payout is a judgement each player makes, and it is a judgement about money that is already gone once it is staked.

What is uncertain is the enforcement picture. Disruption is real and measurable — 3,140 notices and 287,961 removals since April 2024 — but prosecution is close to absent, with one prosecution commenced across the whole of April 2025 to March 2026. That is the number I would put in front of anyone who believes the regulator is either winning or not trying. It is doing neither, exactly.

And the thing that does not change: a GamStop exclusion holds for its full term, and then stays in place until the person contacts GamStop to remove it. No offshore site alters that, and any that suggests otherwise is selling a fantasy about somebody else's circumstances.

Which Sites Take British Players Without Joining the Scheme

All of them are unlicensed in Great Britain, because the licence condition makes the two states mutually exclusive. The practical question is what else they are.

The licence categories move. Curaçao has moved from a master-licence and sub-licence model to direct CGA licensing under the LOK, has ended the legacy orange certificates, and is bringing supplier registration into force from 24 December 2026. Anjouan licenses B2C and B2B under legislation from 2005 and requires player funds to be segregated, random number generators certified by an approved independent testing facility, and AML and age verification controls. Kahnawà:ke hosts licensed operators at a specific data centre in its own territory and issues Client Provider Authorizations with no cap on how many. Malta's authority, which regulates inside the EU, publishes a list of Unauthorised URLs on which it declares any reference to a Maltese licence to be false and misleading, with the most recent entries carrying notice dates of 30 October 2026.

That last detail is the useful habit. Regulators publish lists of sites pretending to hold their licence. The MGA's is public. The CGA says a seal that differs in design, colour or format means the site is not authorised, and a certificate naming the wrong domain means the site is showing somebody else's paperwork. Anjouan says unverifiable certificates should not be relied upon. In each case the check takes under a minute and catches the specific trick this market runs on.

The Choice, Stated Plainly

Above the licence, above the rails, above the bonus terms, one thing protects a balance: a regulator with the power and the will to make an operator pay it back. Everything else is contractual, and contracts are only as good as the courtroom behind them.

So the closing figure I would keep is not a payout time. It is 3,140 — the cease and desist and disruption notices the Commission's Illegal Markets team has issued since April 2024, against a single prosecution commenced across the twelve months to March 2026. That is a regulator fighting an administrative war with almost no criminal enforcement, in a market where an estimated 2.5 per cent of recent online gamblers have touched an illegal site. It is not nothing. It is not a shield either.

FAQ

Are casino sites not on GamStop legal to play at?

The operator breaks the law, not the player. Section 33 of the Gambling Act 2005 makes it an offence to provide gambling facilities without an operating licence, and the Commission says this applies even where the operator holds a foreign licence; the maximum penalty is 51 weeks' imprisonment, a fine, or both. The Act's general offences attach to those who provide facilities, not to adult consumers. So the legal risk sits with the site.

Why do offshore casinos pay faster than British ones?

Mainly because the rail is faster, not the operator. Crypto settlements depend on block intervals and confirmations rather than banking hours, which is why Bitcoin, Litecoin and TRON-based transfers can clear in minutes. British operators are not slow by rule — 96.3 per cent of 44.2 million withdrawals in the Commission's June to September 2024 data cleared automatically. When a British payout drags, it is usually a terms or verification failure the regulator has already criticised.

Which payment methods work at sites that are not on GamStop?

Crypto and e-wallets do most of the work. Bitcoin, USDT on TRON, Litecoin and similar transfer without a banking intermediary. Skrill and Neteller charge 2.80 per cent on a bank withdrawal with a minimum of EUR 3.50 or USD 3.50 from 12 January 2026, and both levy a monthly service fee after six months of inactivity. MiFinity charges 1.8 per cent for crypto withdrawals and €1 for a VISA EEA withdrawal. Pay-by-phone and PayPal routes are narrower than the marketing suggests.

Does an offshore site affect a GamStop exclusion?

No. A GamStop registration blocks gambling with companies licensed in Great Britain, and the licence condition requires those operators to participate. An offshore site is not connected to the scheme, so it neither honours nor weakens the exclusion, and it is reported not to be covered by it at all. Crucially, the exclusion itself is unchanged: it holds for its full term and then remains in place until the person contacts GamStop to remove it.

What happens if an offshore casino refuses to pay?

The routes are the operator's complaints process, then whatever adjudicator it has appointed. Anjouan requires licensees to designate an approved provider and resolve complaints within 30 days before escalation; Kahnawà:ke employs a full-time Dispute Resolution Officer. Neither is free of the operator's own process. A British licensee must offer a Commission-approved ADR entity free of charge within eight weeks, and the Commission itself is a regulator, not an ombudsman.

Do offshore casinos check identity, and when?

Usually, but late. UK licences require verification before a customer is permitted to gamble, under Licence Condition 17, with checks expected before the first deposit or stake. Offshore regimes often follow the €2,000 threshold model instead, which defers full verification until deposits or withdrawals reach that figure — counting linked transactions, not just single ones. That is lawful in Britain as a "hybrid approach" for remote casinos, and offshore it is the norm. It is why documents appear at the worst moment.

What actually protects money held at an offshore casino?

Segregation, and very little else. Anjouan's standards require player funds to be kept apart from operational funds, and UK licensees must keep customer funds in a separate client account and disclose one of three insolvency ratings in writing. But separation does not mean a return of funds if a business fails, and the rating framework does not travel offshore. Kahnawà:ke shows the other edge: a player who breaches its self-exclusion prohibition forfeits deposited and won funds to a charity chosen by the Commission.

Where can someone get help with gambling in Britain?

The National Gambling Helpline is run by GamCare on 0808 8020 133, free and available 24 hours a day, every day; callers in Wales have a separate number, 0808 2819 265. BeGambleAware points to the same line and to online chat. Gamblers Anonymous England, Wales and Ulster is on 0330 094 0322, with around 250 meeting locations and no appointment needed. Citizens Advice Scotland's gambling support line is 0800 328 1131, weekdays 10am to 3pm.

What I Would Tell Anyone Who Asks

A faster payout is a real feature and a poor shield. The offshore market sells the first and quietly swaps out the second, and the swap is written down where anyone can read it — in the licence register entry that must match the domain, in the withdrawal clause with a ceiling on it, and in the identity check that arrives only when a win does.

If a balance is going offshore, the only sensible posture is to treat the site as a counterparty rather than an institution: verify its licence against a public register, read the withdrawal and bonus clauses before the first deposit, test the pipeline with a small withdrawal, and keep the terms version you accepted. Then remember the number that matters more than any payout promise — one prosecution commenced in the twelve months to March 2026, against 3,140 disruption notices. If the money does not come back, the paperwork is the argument, and there is no one else to make it. And if gambling has stopped being a pastime, the National Gambling Helpline on 0808 8020 133 answers at any hour.