UK Casinos Not on GamStop and the Protection That Survives the Move Offshore

A casino not on GamStop is simply one that holds no Gambling Commission licence, so it cannot be made to join the national self-exclusion scheme. It is not illegal for an adult in Britain to play there, but every protection built around a British licence — GamStop, ADR, statutory limits, the credit-card ban — is absent, and each site's own terms are all a player has.

There are UK casinos not on GamStop, and the phrase has quietly become a promise: the thrill of the game without the paperwork. It is a promise with an unhelpful edge, because the protection that the paperwork provided does not travel with the player. What does travel is the balance in the account, and who is holding it.

The trade press treats this corner of the market as a growth story. Market-intelligence firm H2 Gambling Capital estimated the amount staked with illegal gambling operators in the UK reached £16.6 billion in 2025, up from around £5 billion in 2019, with the legally-staked share slipping from 97% to 92%. The Commission's own survey work is far more sober: among people who had gambled online in the past four weeks, it estimated 2.5% had engaged with an illegal site, plus another 1.5% in the past year. That is a small slice of a very large pie. It is also roughly one player in twenty-five, which is not nothing when the question is what happens to a withdrawal.

One naming matter before the numbers. The scheme is GamStop, run by The National Online Self Exclusion Scheme Limited; it is often typed "gamestop", and search engines are forgiving, but the register is not.

Where a Licence Ends and a Player's Cover Ends

Start with the structural fact, because everything else here is downstream of it. GamStop Online blocks a person from opening or using accounts with gambling companies licensed in Great Britain, and it can do no more than that. Offshore sites that hold no Commission licence are not connected to it — a point stated by trade and press sources rather than on a regulator's page, but consistent with GamStop's own terms of use, which bind participating operators only.

The legal baseline is blunt. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without a licence, and it is immaterial whether the facilities are provided wholly or partly by remote communication, and whether they are provided inside or outside the UK. On 21 October 2024 the Commission stated plainly that offering commercial gambling services to consumers in Great Britain without a licence is illegal, including where the operator holds a licence in another jurisdiction. Note whose offence that is: the operator's. Sections 47 and 49 confirm the Act's general gambling offences attach to those who provide facilities, not to adult consumers.

That asymmetry matters when a site goes quiet and a balance with it. A British-licensed operator owes duties to a named regulator with the power to suspend a licence — the Commission did exactly that on 3 April 2020, suspending two operators under section 118(2) for failing to integrate GAMSTOP by the 31 March deadline. An offshore operator owes duties to whoever licensed it, and to its own shareholders. The licence requirement itself is not decorative: since 31 March 2020 all online operators must be part of GAMSTOP as a condition of the Commission's licence, sitting in social responsibility code provision 3.5.5.

One checkable benchmark, since this topic is usually argued with adjectives. The Commission's Illegal Markets team reported that since April 2024 it issued 3,140 cease and desist and disruption notices, referred 447,778 Bing and Google URLs and secured 287,961 URL removals; measured across 160 illegal gambling websites, engagement fell by an average 32 per cent. Its own quarterly figures for April to June 2026 show 366 websites referred to search engines. The point of that number is not that offshore gambling is being shut down. It is that the Commission's tools work slowly, in batches, against domains that reappear under new names — and that the player's balance sits somewhere in the gap.

How to Read an Offshore Licence Register

The best question to ask about any casino not on GamStop is not whether it is offshore, but which regulator it answers to and whether that regulator publishes anything a stranger can verify.

That last part is where registers earn their keep. The Malta Gaming Authority publishes a list of Unauthorised URLs, declaring it has no connection with those domains and that any reference to the MGA or a Maltese licence on them is false and misleading; the most recent entries carried notice dates of 30 October 2026. A site quoting a Maltese licence is checkable against that list in under a minute. Curaçao has moved to direct licensing under the National Ordinance on Games of Chance, in force 24 December 2024, with a Certificate of Operation Seal that must redirect to the Curaçao Gaming Authority's official certificate portal — a different domain behind the seal means the certificate belongs to another operator. Kahnawà:ke still runs a logo certificate programme that generates a Certificate of Good Standing. Anjouan publishes a register with QR verification codes and warns that certificates which cannot be verified there should not be relied upon as evidence of licensing.

Turn that into a rule of thumb. A regulator that maintains a live register and a complaints route has done the minimum a player can ask of it; a regulator whose verification tool is "being worked on" has not. And a licence is not a passport: Anjouan's own regulator said on 10 June 2026 that an Anjouan licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world", and that no licensing authority can exempt an operator from local law. Read that as what it is — the offshore regulator declining, in public, to cover the gap.

Regulators and what their registers actually let a player check

Terms That Build In Delay

Some offshore terms do not confiscate. They just wait, which is quieter and harder to argue with. Where the same term exists on a British-licensed site, the contrast is instructive.

The maximum cashout clause

A cap on how much of a bonus win can be withdrawn is standard offshore. One operator reserves the right to limit winnings generated with bonus funds, including free spins and cashback, to 300% of the credited bonus amount, with the excess voided. In Great Britain, the Commission's fair-terms guidance forbids any maximum limit on what a consumer may withdraw from their deposit balance, and the CMA's undertakings, obtained at the close of its investigation on 29 April 2019, went further.

The maximum bet while wagering

Another operator caps the maximum bet while wagering at €5 for regular players and €10 for VIPs, rejecting anything above. Failure to observe a max-bet rule can mean account closure, forfeit of the bonus and any winnings generated during wagering. A pla

yer who hits a run at a higher stake has, without meaning to, played themselves out of the bonus.

Sticky bonuses and contributed play

A sticky, or non-cashable, bonus can be used for wagering but the bonus itself is never withdrawable and disappears at cashout. Wagering contribution charts magnify the effect: slots contribute 100%, table games 20%, video poker and blackjack 10%, and live dealer games 0%. A 35x requirement chased entirely on live roulette is not a 35x requirement at all. In the UK, by contrast, wagering requirements may not attach to play with a player's own deposit balance.

Delay dressed as diligence

Then the slow ones. Extra verification before a first withdrawal, a single withdrawal at a time, a manual review every fifth or tenth payout. On 21 October 2026 the Commission announced that one licensee, running seven websites, would pay £900,000 in a regulatory settlement for failures including unnecessarily delaying consumer withdrawals — and the withdrawal failures named a term allowing only one request at a time. A penalty is a signal that the practice was found; it is also a reminder that it took years and a regulator with jurisdiction to find it. Offshore, there is no equivalent to find it.

The First Time, and Every Time After

If a page like this turns on one thing, it is identity verification, because it is the mechanism that decides whether money can leave an account at all — and offshore, it is the only mechanism a player has.

The first time, at a British-licensed site, the rules are now front-loaded. Licence Condition 17, introduced on 7 May 2019, requires licensees to obtain and verify information establishing a customer's identity before that customer is permitted to gamble, and the Commission expects those checks brought forward to before a deposit or a stake rather than parked at the withdrawal button. Until 2026 many operators used the "hybrid approach" permitted to remote casinos: identify at registration, verify at the €2,000 threshold under the Money Laundering Regulations 2017. Most checks are frictionless — the 2024 financial vulnerability rollout found 78 per cent of checks returned within ten minutes.

Later, the machinery keeps running. Customer due diligence is ongoing and may need refreshing when circumstances change. Licence condition 17.1.1 says a withdrawal request must not trigger a demand for information the operator could reasonably have sought earlier — a rule aimed squarely at the operator that is happy to take deposits for six months and then asks for a utility bill. Over a quarter of complaints reaching the Commission's Contact Centre concern identity verification, which tells you how well the rule is observed.

Offshore, the same steps exist with none of the sequencing. A site can take deposits for a year on a name and a date of birth, then request source-of-funds documents, then decide the account was never properly verified. The warning signs are consistent: an account opened with initials instead of a full name, prompts to "complete verification later", a bonus offered before any document has been seen, a first withdrawal met with a document request that arrives on the day the balance becomes worth having.

One asymmetry deserves stating flatly, because it is the reason this niche exists at all. Self-exclusion with GamStop Online is set for 6 months, 1 year, 5 years or 5 years with auto-renewal, takes up to 24 hours to take effect, cannot be cancelled during its term, and stays in place after the chosen period ends unless the person contacts GamStop to remove it. An offshore site is not a route around that. It is a route around a register — which is what a person should want, not what they should look for.

Five Signs an Offshore Operator Is Worth the Risk

The signs that separate a serious offshore operation from a rented template, each with a check that takes minutes.

A licence you can verify in the regulator's own register

Not a seal image, not a number in the footer. Curaçao's Certificate of Operation Seal must redirect to the Curaçao Gaming Authority's official certificate portal; if the design, colour or format differs, the site is not authorised by the CGA. Anjouan certificates carry a unique licence number and a QR code linking to the public register. Check: click the seal and confirm the domain behind the certificate matches the site you are on. A certificate showing a different domain belongs to somebody else.

Terms that name the cashout cap in plain pounds

Reputable offshore operators state maximum cashout rules up front. The rest bury them. Check: find the bonus terms before claiming anything and look for a fixed cap — one operator's 300% of bonus amount, for instance — plus time limits and the wagering multiple. If the cap is not stated as a number, assume the worst case, because the operator has.

A published complaints escalation route with named ADR

Anjouan requires licensees to designate an approved ADR provider and list its name and contact details in player-facing terms, with complaints expected to resolve within 30 days before escalation; the approved providers include EGIS ADR, Axion ADR, iGaming ADR and an approved ADR provider Check: find the provider's name in the terms and confirm it appears on the regulator's approved list. A complaints email address is not a dispute route.

Payment methods that are traceable and regulated

Licence condition 5.1.2 requires British licensees to accept payment only from a provider that is a 'payment service provider' within the Payment Services Regulations 2017 — a rule that exists because untraceable rails make disputes unwinnable. Offshore, that filter is gone. Check: prefer a card or an e-wallet with a transaction record over anything a bank cannot see. A payment a bank cannot describe is a payment a bank cannot help recover.

Player funds segregated and disclosed

Anjouan's standards require segregation of player funds from operational funds; in Britain, licence conditions 4.1.1 and 4.2.1 require a three-tier insolvency rating — "not protected", "medium protection" or "high protection" — disclosed in writing. And even then: keeping customer funds in a separate client account does not mean customers get their money back if the operator becomes insolvent, and businesses are legally allowed to hold customers' money in overseas bank accounts. Check: read the insolvency rating before depositing. "Not protected" is a disclosure, not a promise.

A Method for Judging One of These Sites

Five steps, in order, each with the reason it comes where it does. All of it is ordinary — nothing here involves a VPN, a second account or a borrowed identity, and none of it is a way around any self-exclusion.

1. Find the licence and open the regulator's register. Reason: every other check assumes the operator is who it says it is. A licence number that cannot be traced in a live register makes the rest of the exercise pointless.
2. Read the bonus terms in full before claiming any offer. Reason: the wagering multiple, the time limit, the game contributions and the cashout cap together determine whether a bonus has any value. Offshore multipliers run to 25x–40x by trade accounts; British-licensed ones are capped at 10x since 19 January 2026.
3. Decide what is being deposited before the balance matters. Reason: the amount a person is willing to lose is a decision best taken when nothing is riding on it. Financial limits and prompts exist on British sites precisely because that decision is harder once an account is live.
4. Test the withdrawal route with a small sum early. Reason: it establishes what the site will ask for and how long it takes, while the sum at risk is trivial. The Commission's own data for June to September 2024 recorded 96.3 per cent of withdrawals at large operators clearing automatically; an offshore withdrawal that stalls for a week on a £50 request is answering a much larger question.
5. Write down the complaints route before it is needed. Reason: a dispute is an argument about documents, and the operator holds them. Ange the regulator's ADR list and the operator's own escalation address into a note at sign-up; reconstructing them at the moment of a stuck payout is when people give up.
6. Set every limit the site offers, then set one the site cannot undo. Reason: account limits protect a balance, not a person. Bank gambling blocks, offered by eleven named institutions on the Commission's list, decline payments at merchant category level and apply at card level, so they must be activated on each card. They are the one control that sits outside the operator's control entirely.

The Numbers Behind the Noise

Two sets of figures get waved around in this market, and both deserve reading properly.

GamStop's own register is the first. It recorded 117,756 new registrations during 2025 and 561,983 active exclusions at the end of that year; by July 2026 it reported 614,738 consumers currently on the register, of whom more than one in two had opted for the maximum five-year exclusion, while only one in four across all age groups had chosen six months. The 2025 split was 29% for six months, 24% for a year, 25% for five years and 22% for auto-renewal. Under-25s accounted for nearly one in three of all self-exclusions in the first half of 2026, a 26% year-on-year increase.

The site-level numbers are the second, and they are the ones people quote at each other. Claims about stake going offshore range from £2.7 billion a year in a 2024 study for the Betting and Gaming Council to £16.6 billion from H2 Gambling Capital, with a separate analysis for the Campaign for Fairer Gambling putting the unregulated share at 9% of an £8.8 billion market in 2025. That spread is not a scandal; it is what happens when the thing being measured is deliberately hard to measure. The Commission's October 2024 methodology combines web-traffic data with a licensed-play assumption of £0.32 GGY per minute for online slots, and explicitly notes it does not capture activity hidden by VPNs.

Worth noting alongside all of it: the Commission's estimate of GB consumer time spent on illegal gambling websites was 306 million minutes in January 2025, falling to 116 million in June and 152 million in July. Big, volatile, and built on modelled traffic. Which is why the honest position on the size of this market is that it is large, growing by most accounts, and not known to within a factor of several.

Questions About Offshore Casinos

Are UK casinos not on GamStop legal?

Playing at one is not an offence for an adult in Great Britain, but the operator is committing one under section 33 of the Gambling Act 2005: providing facilities for gambling without a licence, and it is immaterial whether those facilities are provided wholly or partly by remote communication, or inside or outside the UK. The risk therefore sits with the site, not with the player — and so does every duty of care, which is the part that matters when something goes wrong.

What is the best UK casino not on GamStop?

There is no defensible ranking, and any page offering one is selling something. What can be compared is structure: a licence traceable in a live regulator's register, bonus terms that state the cashout cap as a number, a named ADR provider on the regulator's approved list, and segregated player funds with the insolvency rating disclosed. At Curaçao's register, an aggregator read counted 704 licences held by 698 operators in November 2026, so a customer is selecting from a very long list on very thin evidence.

Do these sites take PayPal?

Some may list it, but the meaningful question is whether the rail is traceable. Licence condition 5.1.2 requires British licensees to accept payment only via a provider that is a 'payment service provider' under the Payment Services Regulations 2017; offshore, no such filter applies. Account-to-account transfers, wallets and crypto each carry a different level of recoverability, and crypto carries the least. A method a bank cannot see is a method a bank cannot help recover.

Are there any reputable casinos not on GamStop in 2026?

Reputable is a word about conduct, not licensing, so it has to be evidenced. The evidence available is the regulator's own output: Malta's Unauthorised URLs list, with notices dated 30 October 2026, names domains falsely citing a Maltese licence. The Gambling Commission issued an industry warning notice on 20 January 2025 about licensed operators' casino games appearing on unlicensed sites that often target self-excluded customers. A site's absence from such lists is weak evidence; its presence is conclusive.

Can a UK-licensed casino ever be not on GamStop?

No. Since 31 March 2020, participation in the national multi-operator self-exclusion scheme has been a condition of a Commission licence under social responsibility code provision 3.5.5, and the Commission checks the entire customer base of each operator at least every 24 hours. Anything advertising itself as a licensed UK casino not on GamStop has one of the two halves of that claim wrong. The binary is useful: if no Commission licence, then no GamStop, no ADR entitlement, no credit-card ban.

What happens to a balance if the site stops paying?

In Britain, un-staked deposits remain the customer's and terms allowing confiscation are prohibited; ADR providers record the outcome of disputes, and IBAS reported 100 per cent operator compliance with decisions in the consumer's favour in 2024-25. Offshore, the terms are the whole argument. Where a site holds no traceable licence, holds funds in an overseas account and names no ADR provider, the practical answer is that a balance is a claim against a company that has never agreed to answer to anyone a player can reach.

Where does help come from if gambling stops being a game?

The National Gambling Helpline is run by GamCare on 0808 8020 133, free, 24 hours a day, every day of the year, also reachable by live chat and WhatsApp; callers in Wales are also given 0808 2819 265. It is not a crisis line. Beyond it: GamFam for families, Gamblers Anonymous on 0330 094 0322, Gam-Anon for relatives, NHS specialist clinics, and Citizens Advice on debt. Separately, blocking software signposted by GamStop — BetBlocker, which blocks over 1,368,000 gambling websites and 3,100 apps — sits on the device rather than at the site.

The Cover That Travels

Strip the topic back and it is a trade between two things: freedom from a register, and the protection a register enforces. The first is real and costs nothing. The second includes the credit-card ban in force since 14 April 2020, statutory ADR access at eight weeks, the 10x wagering cap from 19 January 2026, a £5 stake limit on online slots since 9 April 2025, and a licence the Commission can suspend in a morning — none of which follows a player offshore, because none of it was ever the player's to take.

What does follow is the balance, and the only cover for it is diligence of a kind no regulator is going to do on anyone's behalf. That diligence has a floor, and the floor is simple: any site visited instead of contacting GamStop is not a fresh start. Self-exclusion holds for its full term and then stays in place until the person contacts GamStop to remove it.

If the reasoning ever matters more than the odds, the National Gambling Helpline is free on 0808 8020 133, 24 hours a day. GamStop's register passed 614,738 people in July 2026, and every one of them is evidence that the system works — as long as nobody is sold a way around it.