Casino Sites Not on GamStop Where Offshore Licences Sit Beside British Rules

Casino sites not on GamStop are offshore operators holding no Gambling Commission licence, so the national self-exclusion scheme cannot apply to them. British-licensed sites block registered players within 24 hours and must follow British rules on bonuses, stakes and withdrawals. Offshore sites set their own, and nobody in Britain can enforce them.

It is often typed "gamestop", which is the spelling the search box suggests and the one the scheme does not use; the register, the licence condition and the helpline all say GamStop.

The single most useful thing to understand about this corner of the market is that the phrase describes an absence. A site is "not on GamStop" because it holds a licence somewhere else — Curaçao, Anjouan, Kahnawà:ke, Malta — and the obligations that come with a British licence, including the obligation to join the scheme, never attached to it. That is the whole architecture. Everything else, from bonus mathematics to payout times, is a consequence.

British-licensed sites therefore set the standard of comparison for this page, and it is a demanding standard. Since 31 March 2020 every operator with a Commission licence must be part of GamStop as a condition of that licence; the requirement sits in the Licence Conditions and Codes of Practice at social responsibility code provision 3.5.5. Since 19 January 2026 wagering requirements on bonus funds are capped at ten times. Slot stakes are capped at £5 a spin, or £2 for players aged 18 to 24. None of this follows an operator across a border.

Offshore is not a synonym for crooked, and it is not a synonym for bargain either. Some offshore operators run genuinely tight operations under a regulator that answers the phone. Others are the reason the Commission's Illegal Markets team has, since April 2024, issued 3,140 cease and desist and disruption notices. What follows is how to tell one from the other without pretending the risks are symmetrical.

Early and plain, because the rest of the page depends on it: a site without a Commission licence is not licensed in Great Britain, and none of the protections described here apply to it. The National Gambling Helpline, run by GamCare, is free on 0808 8020 133, 24 hours a day, every day of the year, and callers in Wales can use 0808 2819 265.

Best casino sites not on GamStop and what the licence actually buys

The word "best" is doing heavy lifting in that phrase, so it is worth asking what a licence from an offshore regulator is worth. I do not think a licensing certificate tells a player very much on its own. What tells you something is the shape of the regime behind it, and the regimes are not remotely alike.

Start with cost, because cost shapes who applies. A Curaçao B2C licence under the reformed National Ordinance on Games of Chance costs a one-time, non-refundable EUR 4,592 to apply, with EUR 150 per ultimate beneficial owner, and an annual total of EUR 47,450 — a EUR 24,490 licence fee to the National Treasury plus a EUR 22,960 supervisory fee to the Curaçao Gaming Authority. Anjouan's published schedule is EUR 17,828 for issuance and the same for annual renewal, with EUR 500 per additional domain. Malta's B2C route asks a one-time EUR 5,000 application fee, a fixed annual licence fee of EUR 25,000, gaming tax of 5 per cent of gaming revenue, and minimum paid-up share capital of EUR 100,000.

Those figures are not moral verdicts. But a regime that charges EUR 17,828 and levies a substantial amount on operators who cannot pass a suitability check is a licensing authority with a different relationship to its licensees than one that requires six figures of capital before the licence is issued.

The British baseline, for comparison, is not a fee schedule but a criminal statute. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and the Commission states plainly that it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence — including where the operator holds a licence in another jurisdiction. Section 33 applies to remote gambling if at least one piece of remote gambling equipment used is situated in Great Britain, and, under the post-2014 wording, if the provider knows or should know the facilities are likely to be used in Great Britain.

There is a detail in that which repays attention. The offence attaches to the operator, not to the player. Adult consumers are not the subject of section 33. The Commission's own summary lists providing gambling facilities in Great Britain without a relevant licence as an offence by the operator. So the risk a player runs on an offshore site is not prosecution. It is the complete absence of recourse.

Curaçao reformed and harder to read than it used to be

Curaçao used to be the answer everyone knew: a master licence, sub-licences, a four-digit number ending in /JAZ. That model is gone. The LOK took effect on 24 December 2024, making the Curaçao Gaming Authority the direct licensing and supervisory authority, and the former private master licensors can no longer grant new Curaçao gaming licences. The legacy "orange" sub-licence certificates ended on 15 October 2025.

The CGA's verification framework is unusually concrete and worth knowing. It issues two separate seals: a Certificate of Operation Seal, given only to B2C operators and only for an approved, registered player-facing domain, and a License Certificate Seal, available to B2B and B2C entities and not domain-specific. Clicking a Certificate of Operation Seal must redirect to cert.cga.cw. If the seal differs in design, colour or format, the site is not authorised by the CGA. If the certificate behind the seal names a different domain from the one being visited, the site is displaying another operator's certificate.

One practical warning sign: the CGA announced on 7 October 2026 that its previous online gaming portal would not return to service and that it is working on an alternative mechanism for verifying licensed domains, because the earlier digital licence seal may be affected by the transition. In the meantime a historic /JAZ number or legacy seal must not be treated as proof that an operator currently holds a valid CGA licence.

Anjouan as a cheap contested and still issuing jurisdiction

Anjouan is a constituent territory of the Union of the Comoros, and its framework rests on legislation adopted in 2005 including the Anjouan Computer Gaming Licensing Act. The Anjouan Gaming Authority names the Anjouan Offshore Financial Authority as competent regulator, with Anjouan Licensing Services Inc. as sole authorised licence administrator.

The contested part is not small. An ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around EUR 17,000 per licence per year, and that Comoros financial intelligence officials described Anjouan Corporate Services as operating illegally; the report also said a former attorney-general of the Comoros called the licensing seller "an illegal entity" and that the AOFA was stripped of recognised-regulator status by Comorian banking laws passed in 2013 and 2015. Anjouan Gaming's own position, stated on 10 June 2026, is that an Anjouan licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world". Anjouan says an independent legal opinion of 19 September 2024, reconfirmed in February 2026, confirms the AOFA's authority — a claim made by the licensee side, not by a court.

Kahnawà:ke as a contractual strict and unusual jurisdiction

The Kahnawà:ke Gaming Commission has regulated interactive gaming since its Regulations of 8 July 1999, and describes itself as having done so longer than almost any other jurisdiction. The structural feature to understand is that the Interactive Gaming Licence is held by only one entity at a time — Mohawk Internet Technologies, since 1999 — and operators trade under Client Provider Authorizations, which the KGC may issue without limit.

Two Kahnawà:ke rules stand out. Its regime requires a licensee's relationship with players to be contractual and free of unfair or unreasonable terms, and requires sites to let a player set limits including zero. And its voluntary self-exclusion is permanent and irrevocable: a player who breaches it forfeits funds deposited or won to a third-party charity selected by the Commission.

Permit costs are rising there too: from 1 January 2027 the CPA application fee goes from USD 35,000 to USD 40,000, and the five-year renewal from USD 5,000 plus the annual fee to USD 40,000 including it, while the annual CPA fee stays at USD 20,000.

Malta as a European regulator in the same conversation

Malta is not the classic "not on GamStop" jurisdiction, but it belongs in the comparison because the Malta Gaming Authority publishes something the others mostly do not: a list of Unauthorised URLs, declaring it has no connection with those domains and that any reference to an MGA or Maltese licence on them is false and misleading, with the most recent entries carrying notice dates of 30 October 2026. Malta also requires a B2C licence whenever a Maltese or EU/EEA entity offers a gaming service from Malta, to a Maltese person or through a Maltese legal entity.

Costa Rica as the case where there is no licence at all

Costa Rica has no comprehensive gambling licensing regime and no formal framework for issuing gambling licences; the "data processing license" sometimes cited in the trade is not a licence in the strict legal sense. The Legislative Assembly rejected Bill No. 25,057 in early 2026, which would have introduced mandatory licensing. Under Costa Rican law, games of chance determined primarily by luck rather than skill are generally prohibited. A site claiming a Costa Rican "licence" is claiming something that does not exist.

New casino sites not on GamStop and how the licence changed in 2026

That heading's phrase matters more than it looks, because there is a live administrative event offshore right now. Curaçao operators holding a valid licence when the LOK came into force received a six-month provisional licence by operation of law, due to expire on 24 June 2025; the CGA extended those provisional licences a further six months, to 24 December 2025, and said operators had to be fully compliant by the end of that second period to be eligible for a full licence. The CGA also announced on 15 October 2025 a framework for converting certain B2C licences issued under the previous regime into B2B licences, noting that a single company may not hold a combination of B2B and B2C licences.

Newer still: supplier licensing and supplier registration become fully mandatory and enforceable in Curaçao from 24 December 2026. Suppliers established outside Curaçao providing critical services to licence holders must register with the CGA but do not need a Curaçao supplier licence.

What this means in practice is that a site's licence status can have changed within the last eighteen months without the site's own footer having changed with it. A third-party tracker reading the CGA's public register reported 704 Curaçao licences held by 698 operators, of which 552 were active, as of 03:30 UTC on 6 November 2026 — a third-party reading, not a CGA publication, and a good illustration of how many certificates exist relative to how many are live.

The British side of the same question is the moving part most players notice: the bonus rules. From 19 January 2026 licensees may not apply wagering requirements over a maximum of ten times, and may not include more than one type of gambling product within an incentive. The Commission consulted on thresholds of one, five or ten times and chose ten, noting the limit "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements". That is the number to hold in mind when an offshore offer arrives advertising 40x.

How identity checks decide everything

If one mechanic governs the experience of playing offshore, it is customer due diligence, so take that phrase literally rather than as an abstraction. In Britain the duty comes from the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017. In remote casinos, identification and verification are required when a customer deposits funds to take part in remote gambling, or withdraws such funds or winnings, amounting to €2,000 or more — and the threshold applies both to a single transaction and to transactions that appear to be linked, including where they form part of one logged-on period.

The first time, before any of that, Licence Condition 17 requires licensees to obtain and verify information establishing identity before the customer is permitted to gamble, covering at minimum name, address and date of birth. A remote casino may identify customers and verify age at registration but defer full verification until the €2,000 threshold — the Commission's "hybrid approach" — but before permitting a deposit, licensees should tell customers what documents or information they may need, in what circumstances and in what form. In practice many operators verify instantly against credit reference agencies and the electoral roll, in which case no documents are requested at all.

Later, the friction point is withdrawal. Licence Condition 17.1.1 requires that a customer's withdrawal request must not result in a requirement for additional information if the licensee could reasonably have requested that information earlier — though this does not prevent seeking information it must obtain at that time under another legal obligation such as anti-money-laundering rules. Over a quarter of complaints reaching the Commission's Contact Centre concern identity verification, a concern customers raise when asked for documents only on attempting to withdraw. That is the specific failure mode to expect, and the Commission has said it is concerned about operators using "fuzzy matching" through third-party verification providers and onboarding customers on partial or equivocal verification.

The warning signs on an offshore site are the mirror image. A registration that asks for a full name, address and date of birth but never asks for anything else until a large withdrawal is pending. A terms page that permits the operator to withhold funds for a failed check — a term British guidance prohibits, since operators may not confiscate or deduct any part of a deposit balance on the basis that the consumer has failed identity or age verification. And a site whose own account verification is described as discretionary. The Commission's 2026 risk assessment rates the remote casino sector as high risk for money laundering, unchanged from the previous rating, and reports an increase in the scale and sophistication of attempts to bypass checks using false documentation, deepfake videos and face swaps generated by AI. Offshore operators face the same criminals with less supervision over how they respond.

British rules against offshore terms, by what you actually get

The table below compares the two regimes by criterion rather than by brand, which is the only honest way to do it. Every value is drawn from the sources cited elsewhere on this page.

The stake-limit line is the one that surprises people, so it is worth stating precisely. The £5 maximum stake per game cycle for online slots for all adults went live on 9 April 2025, and the £2 limit for adults aged 18 to 24 went live on 21 May 2025, introduced by the Gambling Act 2005 (Operating Licence Conditions) (Amendment) Regulations 2025. The limits apply to online slots only and do not touch roulette or blackjack. A player who wants to stake £20 a spin cannot do it on a British-licensed slot game, and that is not a loophole — it is the rule working.

The withdrawal row deserves its own sentence, because the mechanism is where offshore difference is most visible. The Commission permanently banned reverse withdrawals at requirement RTS 14B, in force from 31 October 2021: "Consumers must not be given the option to cancel their withdrawal request". That ban removed a device that had kept money in play by design. An offshore site that lets a withdrawal request sit in a cancellable state has reintroduced it.

Five signs an offshore operator can be trusted

None of these is a guarantee. All five are checkable before a penny moves, and each one has a specific place to look.

The licence is verifiable at the regulator, not just in the site's own footer

A seal is a picture; a register is a record. A Curaçao Certificate of Operation Seal must redirect to cert.cga.cw, and the certificate it shows must name the same domain as the site being visited — if it names another, the site is displaying a certificate belonging to a different operator and should be considered unauthorised or fraudulent. Anjouan's published framework says certificates carry a unique licence number and a QR verification code linking to the public register, and that a certificate which cannot be verified there should not be relied on. Kahnawà:ke has run its Logo Certificate Program since 15 January 2010, generating a Certificate of Good Standing on a click.

The governing law and dispute route are named, and the route is real

A trustworthy offshore site tells you which regulator it answers to and which dispute body hears complaints. Anjouan requires licensees to designate a regulator-approved ADR provider and to list its name and contact details in player-facing terms, with complaints expected to be resolved within 30 days before escalation; the currently approved providers are EGIS ADR, Axion ADR, iGaming ADR and another approved body Kahnawà:ke employs a full-time Dispute Resolution Officer. If the terms say disputes are resolved "at the operator's sole discretion", that is not a dispute route.

Bonus terms state numbers, and the numbers are survivable

A wagering requirement is where a bonus either becomes cash or does not. Offshore welcome multipliers commonly sit at 35x to 50x, and the contribution chart is the sharper end of the term: one offshore operator's published chart gives slots 100 per cent, table games 20 per cent, video poker and blackjack 10 per cent, roulette and baccarat 5 per cent, and craps, jackpots and live dealer games 0 per cent. A 40x requirement on a game that contributes 5 per cent is an 800x requirement in practice. Maximum cashout clauses are the other tell — one operator reserves the right to limit withdrawals from bonus winnings to 300 per cent of the credited bonus amount and to void the excess.

The payout terms do not build in delay, and they say who pays

Watch for withdrawal architecture rather than marketing. A term allowing only one withdrawal request at a time, with no second request until the first is authorised, has been found unfair under the Consumer Rights Act 2015 in a British regulatory settlement, and a practice of manually reviewing every fifth or tenth withdrawal so that extra information is required before processing is the same trick with a different name. Both appeared in the Commission's 21 October 2026 announcement that an operator would pay £900,000 in a regulatory settlement for failures including unnecessarily delaying consumer withdrawals. Fee structures also matter: an offshore site may charge a cost-reflective processing fee, but a site that advertises free withdrawals and then applies an unlisted conversion or processing charge has changed the deal after the fact.

There is a customer-funds statement, and it says which rating applies

British rules require gambling businesses to select one of three customer-funds protection ratings — "not protected", "medium protection" or "high protection" — and to state in their terms which applies, with an operator rated "not protected" reminding the customer every six months that funds are not protected in the event of insolvency and stating the value of funds held. Anjouan's published standards require operators to segregate player funds from operational funds. Even where funds are segregated, the honest version of the sentence is that keeping customer funds in a separate client account does not mean customers get their money back if the operator becomes insolvent — and gambling businesses are legally allowed to hold customers' money in overseas bank accounts.

Checking a site before anything else happens

Six steps, in this order, each with the reason it earns its place.

1. Confirm the licence at the regulator, not on the site. Take the licence number or seal, open the regulator's register directly, and match the domain. Reason: the mismatch cases — a certificate belonging to another operator, a legacy /JAZ number treated as current, a seal that differs in design — are exactly the cases a footer cannot tell you about.
2. Read the terms for the withdrawal clause before reading anything else. Look for a maximum withdrawal limit on a deposit balance, a single-withdrawal-at-a-time restriction, or a schedule of discretionary review. Reason: these are the terms that decide whether a win is payable, and they are buried where a bonus banner never points.
3. Check whether the country you are in is actually served. Anjouan states its licences carry no territorial restrictions under Anjouan law but that holders must comply with all applicable laws in the jurisdictions where they operate, and the licence is not a universal authorisation. Reason: a site can be lawfully licensed where it sits and still be operating unlawfully where you sit, and section 33 attaches that risk to the operator rather than to you — but it tells you what you are dealing with.
4. Match the bonus mathematics against the games you actually play. Multiply the wagering requirement by the contribution weight of your chosen game rather than reading the headline multiple. Reason: a 35x requirement on a 5 per cent contribution game is a different product from 35x on slots, and the operator's own chart is the only reliable source.
5. Check what identity documents will be demanded and when. British guidance requires telling customers up front what may be needed and forbids asking on withdrawal for information that could reasonably have been requested earlier; a site with no such commitment will ask later, when there is money waiting. Reason: over a quarter of Contact Centre complaints concern identity verification, and it is the most common way a payout is delayed.
6. Set the limits the site offers, in writing, at account level. Kahnawà:ke requires its licensees to let players set limits including zero, and British rules since 31 October 2025 require all gambling businesses to prompt customers to set a financial limit before first deposit and to offer limits through a free-text box at account level. Reason: a limit already set is harder to talk past than a limit considered.

Nothing on that list involves circumventing anything. It is the ordinary diligence of reading a contract.

Self-exclusion, and what it does not reach

Self-exclusion is not a soft block or a cooling-off device, so state it plainly: a GamStop exclusion holds for its full term — six months, one year, five years, or five years with auto-renewal — and then stays in place until the person contacts GamStop to remove it. Registration cannot be cancelled or deactivated during the exclusion period. Under the terms of use, auto-renewal may only be switched off during the last six months of a five-year minimum exclusion period, and auto-renewal continues for up to four new five-year periods. The organisation's 2025 annual report devotes a section to its refusal to remove registrations before the chosen term ends.

The register is not small. Gamstop Online had 561,983 active exclusions at the end of 2025, with 117,756 new registrations recorded during that year. As of July 2026 it reported 614,738 consumers currently on the register, of whom more than one in two had opted for the maximum five-year exclusion, while only one in four across all age groups had self-excluded for six months. Under-25s accounted for nearly one in three of all self-exclusions in the first half of 2026, a 26 per cent year-on-year increase.

An offshore site with no British licence sits outside that register. The Commission issued an industry warning notice on 20 January 2025 about casino games supplied by licensed operators appearing on unlicensed websites available to GB consumers, noting that such sites often target customers who have self-excluded via GamStop and may have inadequate social responsibility and anti-money-laundering controls. I would put that more bluntly: a site that markets itself on being outside the scheme is advertising to the one group of people whose own stated decision was to stay out of the market.

Bank-level blocks are the practical layer underneath. The Commission's list of banks offering a gambling blocking service, last updated 16 October 2026, names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling. These work by declining payments categorised under gambling Merchant Category Codes, cover online casinos, betting sites, gaming apps and physical venues, are applied at card level so must be activated on each card, and most banks use a 48-hour or 72-hour cooling-off period before gambling transactions are allowed again after a block is switched off. Blocking software is the third layer: GamStop signposts Gamban and BetBlocker, the latter a 501(c)(3) non-profit registered in Delaware stating it blocks over 1,368,000 gambling websites and 3,100 apps, requires no registration and is free worldwide. Gamban's free UK licence scheme, TalkBanStop, ended on 31 March 2026, so in England and Scotland it now costs £4.99 a month or £29.99 a year after a 7-day free trial.

Where the money goes, and how long it takes

Payout speed is the topic on which offshore sites make their loudest promises and where the least evidence usually sits. Britain, by contrast, has numbers. Commission data covering June to September 2024 records 44.2 million withdrawals by customers of large online operators in that period, of which 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours and 0.1 per cent took up to 48 hours. Earlier Commission data from some of the largest companies showed around 99 per cent of withdrawal requests approved, processed and fulfilled within 24 to 48 hours.

That does not mean players feel it. Consumer research published 23 July 2026 found 49 per cent of people who had gambled in the past 12 months agreed that "it is quick and easy to withdraw and collect my winnings", 33 per cent were neutral and 18 per cent disagreed. Complaints coded "Withdrawals and/or financial transactions" to the Commission's Contact Centre fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025 — a fall worth noting, though the Commission's Annual Report and Accounts 2024-25 still states that issues relating to withdrawals continue to be the cause of most of the complaints it receives.

The variable that surprises people is payment method, because the delay often sits in the rail rather than the operator. Visa Direct's Fast Funds service processes in real time with funds available within 30 minutes of approval. Faster Payments has a scheme maximum of £1 million per transaction, raised from £250,000 on 10 February 2022, with over 90 per cent of transactions completing in under 2 seconds — though the ceiling is not an entitlement, since individual banks set lower per-payment limits. A personal PayPal UK account incurs no fee to withdraw to a bank account where no currency conversion is involved, but a failed withdrawal due to incorrect bank details attracts a 0.50 GBP bank return fee.

That last point is relevant to two of the brief's phrases. Pay by phone casino sites not on GamStop and PayPal casino sites not on GamStop both describe methods rather than protections: the licence position is identical whichever rail is used. On the e-wallet side, the fees are worth reading before the bonus is. Skrill applies 2.80 per cent of the amount withdrawn, minimum EUR 3.50, for transfers to a bank account, effective 12 January 2026, and charges no service fee provided the account is used at least once every six months. Neteller charges the same 2.80 per cent or a USD 3.50 minimum, plus 12.75 USD for a member wire and 0 to 7.5 per cent for withdrawal to Visa or Mastercard. Jeton's UK schedule shows a local bank transfer withdrawal taking 0 to 30 minutes with no sender or receiver fee and limits of £10 to £10,000, while a separate instant bank transfer carries a 2.5 per cent sender fee. MuchBetter states withdrawals may take from a few hours up to 5 business days depending on method. None of these figures is a criticism of the wallet; they are simply the arithmetic that a bonus touting "instant cashouts" tends not to include.

On crypto rails, the same honesty is required. Bitcoin's protocol targets an average interval of 10 minutes between blocks, but a block is not guaranteed in 10 minutes: within any 10-minute window the probability of a block being found is about 63 per cent, rising to 95 per cent within 30 minutes. The classic client shows a transaction as unconfirmed until it is 6 blocks deep, and most exchanges and merchants bearing double-spend risk require six or more. Litecoin targets an average 2.5-minute block interval, with a first confirmation in about 2.5 minutes and six in about 15 — though only about 55.43 per cent of modelled six-confirmation spans complete within 15 minutes. A USDT TRC-20 transfer to a wallet already holding USDT consumes about 65,000 Energy, roughly 13 TRX burned without staked Energy, and a transfer to a new wallet roughly double that. Every one of those intervals is a wait a player experiences as "the site is slow".

What the enforcement figures suggest about the market

It would be strange to write about this market without looking at how hard the regulator is pushing on the other side of it. Since April 2024 the Commission's Illegal Markets team has issued 3,140 cease and desist and disruption notices — 2,032 cease and desist notices, 774 registrar referrals, 402 host referrals and 3 payment provider referrals — referred 447,778 Bing and Google URLs and secured 287,961 removals. Across 160 illegal gambling websites for which traffic data existed, there was an average 32 per cent decrease in engagement following disruption.

By method, the picture is instructive: registrar blocks and website suspensions produced the largest average fall in engagement at 91 per cent each, ahead of GEO IP blocking at 60 per cent, Bing removal at 52 per cent, Google removal at 30 per cent and Facebook removal at 8 per cent. The Commission's own reading is that GEO IP blocking and registrar blocks beat search-engine removals, because removal makes a site harder to find without fully blocking access.

The volume has not fallen. In July to September 2026 the Commission referred 1,835 websites (7,677,211 URLs) and issued 546 cease and desist notices — a step up from 366 websites and zero criminal investigations in April to June 2026, and from 226 websites and 98 notices in January to March 2026. Across April 2025 to March 2026, every quarter recorded 0 or 1 prosecutions commenced, one in total. Notice volume is not the same thing as deterrence, and the prosecutions column is the honest measure.

Scale estimates vary wildly and that variation is itself the finding. Gambling Commission analysis published 5 November 2026 estimates that, across the whole population including non-gamblers, 0.6 per cent of respondents engaged with illegal gambling websites in the past four weeks and a further 0.4 per cent in the past 12 months, while 94.4 per cent showed no indication of using one; among respondents who had gambled online in the past four weeks, 2.5 per cent had engaged with illegal sites. H2 Gambling Capital estimates UK stakes with illegal operators reached £16.6 billion in 2025, up from about £5 billion in 2019, with the proportion of gambling happening legally falling from 97 per cent to 92 per cent. A Frontier Economics study for the Betting and Gaming Council conservatively estimated £2.7 billion staked annually online on the black market, equal to 2.1 per cent of the £128 billion staked with GB regulated remote operators. Yield Sec analysis for the Campaign for Fairer Gambling put the GB online market at £8.8 billion GGR in 2025, split 91 per cent regulated and 9 per cent unregulated. When estimates of the same market differ by an order of magnitude, the estimates are arguments, and each one's sponsor tells you which argument.

What the British market is, for scale

One number is worth holding while reading all of the above. Total Great Britain gambling industry Gross Gambling Yield was £17.5 billion in the year April 2025 to March 2026, a 4.4 per cent increase on the previous financial year, with the Remote Casino, Betting and Bingo sector at £8.3 billion, up 6.9 per cent, and land-based sectors at £4.9 billion, up 1.1 per cent. Within that, online slots GGY rose 12 per cent year-on-year to £773 million for the quarter January to March 2026, on 25.1 billion spins and 4.8 million average monthly active accounts.

The harm context is smaller and steadier than the headlines suggest. The third annual Gambling Survey for Great Britain, published 16 July 2026 and based on 20,775 adults with fieldwork from January 2025 to January 2026, found 2.4 per cent of all participants scored 8 or more on the Problem Gambling Severity Index, described by the Commission as stable across the survey's three years at 2.5 per cent, 2.7 per cent and 2.4 per cent. 47 per cent of adults gambled in any form in the past four weeks, falling to 27 per cent when lottery-only participation is excluded. And 3.4 per cent of those who had gambled in the past 12 months had sought support because of their own gambling.

The funding behind treatment is now statutory rather than voluntary. The gambling levy introduced by the Gambling Levy Regulations 2025 commenced on 6 April 2025, charging 1.1 per cent of previous-year Gross Gambling Yield for all online operators and for software licences, and raised just under £120 million in its first year, ringfenced solely for research, prevention and treatment. From 1 April 2026 NHS England took commissioning responsibility for gambling-harms treatment in England, funded by approximately £100 million a year split 50 per cent treatment, 20 per cent research and 30 per cent prevention. NHS England had opened 15 specialist gambling clinics across England since 2019.

The difference, in the end, is recourse

Strip the topic back and the comparison is not really about virtue. It is about what happens on the bad day. A British-licensed operator that delays a withdrawal, imposes a maximum limit on what can be taken out, or asks for documents it could reasonably have requested earlier is in breach of a licence condition, and there is a route: complain internally, and if it is unresolved after eight weeks, refer it free of charge to an approved alternative dispute resolution provider — ADR Group, Pegasus ADR Service, a dispute resolution service, CEDR, eCOGRA, IBAS, ProMediate or Tattersalls Committee. IBAS and eCOGRA have historically handled the majority of gambling disputes. The numbers are unromantic: eCOGRA's ADR report for 1 October 2024 to 30 September 2025 records 911 disputes received, of which 150 were valid "Deposits & Withdrawals" disputes, an average domestic resolution time of 31 days, and 17.8 per cent of completed disputes ruled in favour of the consumer. IBAS's 2024-25 report records 3,721 domestic disputes, 217 of them Banking/Financial Disputes, an average completion time of 20 days, and 100 per cent operator compliance with decisions in the consumer's favour.

That last figure is the one that matters when an offshore site is being weighed. IBAS reports 100 per cent operator compliance with decisions in the consumer's favour in both 2023-24 and 2024-25 — compliance that exists because the operator holds a licence the regulator can suspend, as the Commission did on 3 April 2020 when it suspended the licences of two online operators, two online operators, for failure to integrate GAMSTOP by the 31 March deadline under section 118(2) of the Gambling Act 2005. An offshore regulator without that leverage is a different proposition entirely.

And when the question is not a dispute but a person, the helpline is the same one either way: GamCare's National Gambling Helpline on 0808 8020 133, free, 24 hours a day, every day of the year, with 0808 2819 265 for callers in Wales, plus Gamblers Anonymous on 0330 094 0322, Citizens Advice Scotland's gambling support line on 0800 328 1131 and the NHS National Gambling Clinic on 020 7381 7722.

Questions About Casino Sites Not on GamStop

Are casino sites not on GamStop legal?

Legal for whom is the question. The Gambling Commission states it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where the operator holds a licence elsewhere, and section 33 of the Gambling Act 2005 makes it an offence to provide gambling facilities without an operating licence. The offence attaches to the operator, not to the adult player. So the site may be committing an offence while the person using it is not.

Does an offshore site have to honour a GamStop exclusion?

No. GamStop Online blocks access to gambling websites and apps licensed in Great Britain only, and can exclude only from participating operators; it is unable to prevent access to services run by organisations that do not participate. The obligation sits in the licence, at social responsibility code 3.5.5, so it reaches operators the Commission licenses and nobody else. An exclusion set for its full term, and thereafter until GamStop is contacted to remove it, simply does not travel to a site outside that scheme.

Why do offshore casinos want identity documents at withdrawal but not at deposit?

Because at deposit the operator has your money and at withdrawal it has your money to lose. British rules handle this directly: Licence Condition 17.1.1 says a withdrawal request must not trigger a demand for additional information if the licensee could reasonably have requested it earlier, unless another legal obligation such as anti-money-laundering rules requires it at that moment. Over a quarter of complaints to the Commission's Contact Centre concern identity verification for exactly this reason.

Is a pay by phone or PayPal site outside GamStop any different?

Not in protection. The payment rail decides how money moves, not which rules apply to the gambling behind it. Gambling Commission licence condition 5.1.2, effective 31 January 2024, requires licensees to accept payment from Great Britain customers only by a method whose provider is a payment service provider under the Payment Services Regulations 2017 — a condition with no force on an unlicensed site. And a British-licensed operator may not use credit cards for gambling at all, under licence condition 6.1.2, effective 14 April 2020.

What is the wagering requirement on an offshore welcome bonus, typically?

Quoted offshore ranges run at 35x to 50x for welcome bonuses and 40x to 60x for no-deposit offers, against the British cap of ten times, in force since 19 January 2026. But the multiplier is only half the term. One offshore operator's published contribution chart gives slots 100 per cent, table games 20 per cent, video poker and blackjack 10 per cent, roulette and baccarat 5 per cent and live dealer games 0 per cent — so the effective requirement depends entirely on what is played.

What can be done if an offshore operator refuses to pay?

Less than most people expect. The Commission is a regulator, not an ombudsman: it cannot resolve individual complaints or help consumers get their money back, though it records complaints and typically refers disputes to an independent third party. Some offshore regulators require an approved ADR provider — Anjouan lists EGIS ADR, Axion ADR, iGaming ADR and another approved body, with 30 days for the operator to resolve first — and Kahnawà:ke employs a full-time Dispute Resolution Officer. Beyond that, the routes are a foreign small claim or nothing.

The short version, and where the register actually sits

The comparison between British and offshore rules is not a comparison of two sets of gambling regulations with different flavours; it is a comparison between a regulated market and a border, and the practical consequence is that on the bad day — the delayed payout, the withheld balance, the disputed bonus — one side has a licence that can be suspended and an ADR decision that operators comply with, and the other has a certificate issued by whichever authority was cheapest to apply to.

Nothing about that is inevitable, and it is worth saying that a jurisdiction that decides to regulate properly can do so. Curaçao reformed its system on 24 December 2024 and has been working through provisional licences ever since. What has not happened is convergence: a site licensed purely offshore is still outside the national self-exclusion scheme, still outside the ten-times wagering cap, and still outside the withdrawal rules that give a British player a route when something goes wrong.

The one number I would leave in view is the narrowest one on the page. Of the 3,721 domestic disputes IBAS handled in 2024-25, 65 consumer complaints were upheld by written decision, 693 were not upheld and 737 were resolved by a consumer-satisfactory outcome before a ruling. That is what recourse looks like when it exists: unglamorous, slow, and finite. Offshore, the equivalent column is blank.