Online Casinos Not on GamStop in 2026 and the British Regulatory Landscape

Online casinos not on GamStop hold a licence from another country, not from the Gambling Commission, and sit outside the UK's national self-exclusion scheme. A British player can register and play there, but none of the Commission's protections apply, and neither the helpline nor the dispute system can reach the operator.

GamStop is often typed as "gamestop" — a slip the word "game" invites, and worth noting because the register is spelled GamStop. The scheme is the UK's national online self-exclusion register, run by The National Online Self Exclusion Scheme Limited, free to use, established in June 2017 at the request of what was then the Department for Digital, Culture, Media and Sport and the Gambling Commission, and live for consumers since 27 April 2018. Since 31 March 2020 every operator holding a Commission licence has had to be part of it, under social responsibility code provision 3.5.5 of the Licence Conditions and Codes of Practice, which states flatly that "Licensees must participate in the national multi-operator self-exclusion scheme". A site absent from that scheme is, almost by definition, absent from British licensing — and that is the whole subject of this page.

What follows is an attempt to look at the offshore market as the evidence presents it rather than as its own marketing presents it: what the licence actually is, which regimes still mean anything, how an exclusion block behaves once a person registers, and where the numbers on illegal gambling keep pointing. British-licensed sites are the benchmark throughout. Offshore sites get measured against that benchmark — the decent ones and the shabby ones alike.

What a Licence Outside Britain Actually Is

There is a legal baseline worth stating before anything else, because the marketing around these sites is designed to blur it. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and section 33 applies to remote gambling where at least one piece of remote gambling equipment is situated in Great Britain, or — under the post-2014 wording — where the provider knows or should know the facilities are likely to be used in Great Britain. The Commission's own words, published on 21 October 2024, are that it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where the operator holds a licence in another jurisdiction.

That last clause is the one the advertising never quotes. An offshore licence is not a smaller British licence; it is a different country's permission to trade, granted by a regulator with no remit over British consumers and no power to order a payout here.

Which Offshore Regimes Still Carry Weight

Curaçao has been the default offshore badge for twenty years, and it is mid-reform. The National Ordinance on Games of Chance took effect on 24 December 2024, making the Curaçao Gaming Authority the direct licensing and supervisory authority and ending the old master-licence and sub-licence model. The legacy "orange" sub-licence certificates of operation ended on 15 October 2025, and the authority says a historic /JAZ number or legacy seal must not be treated as independent proof that an operator currently holds a valid licence. Operators holding a valid licence on 24 December 2024 received a six-month provisional licence by operation of law, extended for a further six months to 24 December 2025.

So a Curaçao badge on a 2026 site tells you less than it used to, and the checking has become fiddlier rather than easier. The authority announced on 7 October 2026 that its previous online gaming portal would not return to service and that it is working on an alternative way to verify licensed domains, because the old digital licence seal — the thing players were told to click — may be affected by the transition. Where a seal does work, the policy is specific: clicking a Certificate of Operation Seal must redirect to cert.cga.cw, and a certificate displayed behind that seal naming a different domain belongs to another operator and should be treated as unauthorised or fraudulent.

Anjouan, an island territory of the Union of the Comoros, licenses under legislation adopted in 2005 and issues B2C and B2B internet gaming licences at a published fee of EUR 17,828 for issuance and the same again annually, with EUR 500 per additional domain. The regime has a bracing public record. An ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around EUR 17,000 each per year, and that Comoros financial intelligence officials described Anjouan Corporate Services as operating illegally; the same report quoted a former attorney-general of the Comoros describing the licensing entity as "an illegal entity" and said the Anjouan Offshore Financial Authority was stripped of recognised-regulator status by Comorian banking laws in 2013 and 2015. A legal opinion said to confirm the authority's lawfulness is described as such by a licensee, and is unconfirmed. Anjouan Gaming itself said on 10 June 2026 that a licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world" — which is, in effect, the regulator telling you that the local rules still bite.

Kahnawà:ke is the oldest name in the business, regulating interactive gaming since 1999 and describing itself as having done so longer than almost any other jurisdiction. It requires licensees to allow players to set limits, including zero, and its own voluntary self-exclusion is permanent and irrevocable; a player who breaches a self-exclusion prohibition forfeits funds deposited or won to a charity chosen by the Commission. It is also small, restricted in its hosting arrangements, and slow-moving: the commission announced on 6 October 2026 that one client provider authorisation had been suspended with effect from 29 September 2026.

Malta is the closest thing offshore has to a serious regulator — a one-time application fee of EUR 5,000, a fixed annual licence fee of EUR 25,000, gaming tax of 5 per cent of revenue, and minimum paid-up share capital of EUR 100,000 for its Type 1 and Type 2 B2C licences. It also publishes a list of Unauthorised URLs, declaring that any reference to a Maltese licence on those domains is false and misleading.

And Where There Is No Licence at All

Costa Rica deserves separate mention because it is routinely sold as a jurisdiction when it has no comprehensive gambling licensing regime and no formal framework for issuing gambling licences. The "data processing licence" sometimes referenced in the industry is not a licence in the strict legal sense. The Legislative Assembly rejected Bill No. 25,057 in early 2026, which would have introduced a mandatory regime.

The Numbers Behind the Offshore Market

What the Commission's Own Enforcement Data Shows

The Commission's Illegal Markets team has been busy, and the totals are the most concrete numbers in this debate. Since April 2024 it has issued 3,140 cease and desist and disruption notices — 2,032 cease and desist notices, 774 registrar referrals, 402 host referrals and 3 payment provider referrals — referred 447,778 Bing and Google URLs and secured 287,961 URL removals. Measured across 160 illegal gambling websites with traffic data, engagement fell by an average of 32 per cent after disruption activity.

The method matters more than the volume, though. Registrar blocks and website suspensions produced the largest average fall in engagement at 91 per cent each, ahead of GEO IP blocking at 60 per cent, Bing removal at 52 per cent, Google removal at 30 per cent and Facebook removal at 8 per cent. The Commission has said plainly that GEO IP blocking and registrar blocks are more effective than search-engine removals, because removing a site from search makes it harder to find without blocking access. That is the regulator conceding, in its own figures, the central weakness of the approach: it can winnow the search results, and the site keeps trading.

How Much of a Market It Is

Estimates of the black market's size diverge wildly, which is itself the finding. Market-intelligence firm H2 Gambling Capital estimated in May 2026 that the amount staked with illegal operators in the UK reached £16.6 billion in 2025, up from about £5 billion in 2019, with the proportion of gambling happening legally falling from 97 per cent in 2019 to 92 per cent in 2025. Yield Sec analysis for the Campaign for Fairer Gambling put the GB online market at £8.8 billion in gross gambling revenue in 2025, split 91 per cent regulated and 9 per cent unregulated. A study by Frontier Economics for the Betting and Gaming Council conservatively estimated £2.7 billion staked annually online on the black market, equal to 2.1 per cent of the £128 billion staked with regulated remote casino, betting and bingo operators. Same year, same country, estimates ranging from about 2 per cent to about 9 per cent — treat any confident single figure with suspicion, including these.

The Commission's own survey work is more sober. Analysis published on 5 November 2026, covering April 2025 to April 2026, estimates that across the whole population including non-gamblers, 0.6 per cent of respondents engaged with illegal gambling websites in the past four weeks and a further 0.4 per cent in the past 12 months, while 94.4 per cent showed no indication of using one. Among respondents who had gambled online in the past four weeks, the estimate rises to 2.5 per cent. Its illegal gambling dashboard recorded 586 illegal gambling websites accessible to GB consumers in September 2026, and 311 sites had disruption action taken against them in the second quarter of 2026-27, 77 per cent of which saw a reduction in estimated traffic.

How British Terms Compare With Offshore Terms

The table below compares the regimes on the things that decide what happens when money is in dispute. It is organised by regime, not by brand, and every figure comes from the licensing bodies' published schedules or the Commission's own rules.

Read the middle column against the right-hand ones and the pattern is clear. British terms are dull, expensive and prescriptive; offshore terms are cheap, permissive and mostly silent. The wagering cap is the sharpest illustration: the Commission consulted on a cap of 1, 5 or 10 times and settled on 10, saying the limit "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements". Nothing equivalent exists in Curaçao, Anjouan or Malta. Trade coverage describes offshore welcome offers as typically running at 25 to 40 times, which is unconfirmed but consistent with the terms operators publish.

How the Exclusion Block Works

Everything about this niche comes down to what a self-exclusion actually does, and here the honest answer is more rigid than most people expect. Registering with GamStop Online blocks a person from gambling with every online operator licensed in Great Britain, for a chosen term of six months, one year, five years, or five years with auto-renewal. Signing up takes minutes, but it can take up to 24 hours for the block to become effective. Once registered, the registration cannot be cancelled or deactivated during the period — and, crucially, the exclusion stays in place after the chosen term ends unless the person contacts GamStop to remove it. The scheme's 2025 annual report devotes a section to its refusal to remove registrations before the term runs out.

There is a further step most people never reach. If the registration is not deactivated after the chosen period, GamStop holds the data through a further automatic seven-year self-exclusion period during which operators are told the person was previously excluded. Auto-renewal, meanwhile, can only be switched off in the last six months of a five-year period, and otherwise continues for up to four further five-year terms. The implication is uncomfortable and worth stating: for a large minority of registrants, the block is effectively indefinite unless they act. As of July 2026 the register held 614,738 consumers, of whom more than one in two had opted for the maximum five-year exclusion.

The first time is where the surprises live. For a British-licensed operator, the check is automatic: since April 2020 operators must check their entire customer base for GamStop registration at least every 24 hours, and the same requirement stopped registered people receiving direct marketing. Later on, once the term expires or the person tries their luck elsewhere, the check is only as good as the record — and the Commission has warned that onboarding a customer using a middle name instead of a forename can create mismatches with records held elsewhere, such as GamStop, undermining the effectiveness of self-exclusion.

An offshore site is never a way round an exclusion, and it should not be described as one. What it is, factually, is a site the scheme cannot reach, because the obligations attach to operators licensed in Great Britain. GamStop's own terms say it is unable to prevent access to gambling services run by organisations that do not participate. The Commission's industry warning notice of 20 January 2025 went further, noting that unlicensed sites appearing to GB consumers often target customers who have self-excluded via GamStop and may have inadequate social responsibility and anti-money-laundering controls.

The Warning Signs in the Block Itself

Four things should make anyone doubt a site's arrangements. A "self-exclusion" you can reverse by email within days is not a self-exclusion; the British term cannot be cancelled at all, which is the point. An operator that offers to lift a block as an inducement — a matched bonus for coming back — is advertising against a licence condition. A site that never mentions exclusion in its terms is not shy; it is unlicensed, or licensed by an authority with no scheme to join. And a "safer gambling" page whose only content is a link to a blocking app, with no register, is decorative.

Blocking software is worth naming as an addition rather than a substitute. GamStop signposts Gamban and BetBlocker; BetBlocker states it blocks over 1,368,000 gambling websites and 3,100 apps, requires no registration and is free worldwide, while Gamban blocks licensed and unlicensed sites and charges £4.99 a month or £29.99 a year in England and Scotland after the end of TalkBanStop funding on 31 March 2026, and remains free in Wales. Bank gambling blocks are the third layer: the Commission's list, last updated 16 October 2026, names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling, and most use a cooling-off period of 48 or 72 hours before gambling transactions are allowed again.

Five Signs an Offshore Operator Is Being Straight With You

It Publishes a Licence You Can Verify, Not a Seal You Can Admire

The quick check is to ignore the badge image and follow the link. A Curaçao Certificate of Operation Seal must redirect to cert.cga.cw; if the certificate behind it names a different domain, it belongs to another operator. Anjouan certificates carry a unique licence number and a QR code linking to a public register, and the authority's own policy says certificates that cannot be verified through that register should not be relied upon as evidence of licensing. Maltese sites can be checked against the MGA's Unauthorised URLs list. A site with no verifiable register entry is selling you a picture.

The Terms Name the Regulator, the Licence Number and the ADR Provider

An honest operator names its regulator in the terms, gives the licence reference, and — in Anjouan's case, because the rules require it — designates an approved alternative dispute resolution provider and lists its contact details in player-facing terms. The currently approved Anjouan providers are EGIS ADR, Axion ADR, iGaming ADR and one independent licensee. Where no dispute route is named at all, the practical answer is that there is none.

Withdrawals Are Not the Moment the Rules Change

This is where the industry's worst habits surface, and the British benchmark is useful precisely because it is quantified. Gambling Commission data covering June to September 2024 records 44.2 million withdrawals by customers of large online operators in that period, of which 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours and 0.1 per cent took up to 48 hours. The Commission banned reverse withdrawals outright from 31 October 2021 under RTS requirement 14B — "Consumers must not be given the option to cancel their withdrawal request" — and licence condition 17.1.1 says a withdrawal request must not trigger a demand for information the licensee could reasonably have requested earlier. Check whether the documents an operator wants are asked for before the first deposit or only when a withdrawal is pending. Anjouan's published standards, incidentally, include player fund segregation and certified random number generators — worth looking for, and worth noticing when an operator makes no such statement.

Bonus Terms Are Numeric, Specific and Not Solitary

A trustworthy bonus states the multiplier, the time limit, the game weighting and the maximum bet while wagering, in numbers, in one place. The offshore norm is a twenty-five-times playthrough with a contribution chart — slots at 100 per cent, table games at 20 per cent, roulette and baccarat at 5 per cent, live dealer at 0 per cent — and a maximum cashout clause. Where an operator instead reserves sole discretion to void winnings, the term is the tell. A British operator can no longer do that: the Commission's fair-terms guidance says terms giving operators sole discretion ("may" or "reserve the right") to void or withhold winnings are unfair within the meaning of the Consumer Rights Act 2015. One operator was fined £170,000 in July 2025 for failures including a term claiming the operator had the right at its own discretion to close accounts or forfeit winnings.

Complaints Are Counted, Not Absorbed

Ask what happens to a dispute and whether anyone publishes the outcome. In Britain, eCOGRA's report for 1 October 2024 to 30 September 2025 records 911 disputes received, of which 150 valid ones concerned deposits and withdrawals, with an average domestic resolution time of 31 days and 17.8 per cent of completed disputes ruled in the consumer's favour. IBAS, in its 2024-25 report, records 3,721 domestic disputes, an average completion time of 20 days, and 100 per cent operator compliance with decisions in the consumer's favour in both 2023-24 and 2024-25. Those numbers are only possible because British licensees must fund and use approved ADR. An offshore operator reporting nothing is not dispute-free; it is unmeasured.

How to Check an Offshore Site Before Depositing

1. Confirm the licence on the regulator's own register, not on the site. Follow the seal's link, read the domain on the certificate, and check the licence number against the public register. Reason: the badge is a graphic file, and the register entry is the only thing an operator cannot fabricate without committing fraud in the regulator's jurisdiction.
2. Write down the regulator's name and the licence number before you register. Reason: if the site later vanishes, a regulator you cannot name is a regulator you cannot complain to, and Anjouan's and Curaçao's rules only help people who can quote a licence reference.
3. Read the withdrawal clause, the verification clause and the maximum cashout clause in that order. Reason: these three do the real work. Note when documents are demanded, and whether a cashout cap applies to bonus winnings.
4. Check whether the operator is part of any self-exclusion scheme and what its terms say about excluded players. Reason: an operator that has never thought about exclusion has usually never thought about gambling harm either, and cannot offer the protections that come with a scheme.
5. Decide whether to add a bank block and blocking software independently. Reason: these act at card and device level and do not depend on the operator's goodwill — the Commission notes most banks impose a 48 or 72 hour cooling-off when a block is switched off, and that is time to think.
6. Test the dispute route on something small and free. Reason: email the operator's complaints address with a trivial query and time the reply, since a black hole on day one is a black hole on the day it matters.

Where the Rules Bite, and Where Help Is Found

Two figures frame the enforcement picture. Over the monitored period of May 2024 to July 2025, just over 1,000 unique illegal gambling websites were accessed by consumers in Great Britain, and the number identified through the Commission's affiliate-page method rose from 364 in May 2024 to 535 in July 2025. Meanwhile, across April 2025 to March 2026, every quarter recorded 0 or 1 prosecutions commenced — a single prosecution in the whole year, in the October to December 2025 quarter. The disruption machine grinds; the prosecution machine barely turns.

For anyone affected by gambling, the help is free and immediate: the National Gambling Helpline, run by GamCare, on 0808 8020 133, 24 hours a day, every day of the year, also reachable by live chat and WhatsApp; callers in Wales can use 0808 2819 265. NHS treatment is commissioned across England, with 15 specialist clinics opened since 2019 and integrated care boards commissioning 8 regional services that receive almost 5,000 referrals a year. The statutory levy on operators, commenced on 6 April 2025, raised just under £120 million in its first year, ringfenced for research, prevention and treatment. If money is the immediate problem, Citizens Advice offers free, confidential advice including debt help.

One further fact deserves to sit in the open, because it is the strongest argument against the offshore shortcut. A self-exclusion under GamStop holds for its full chosen term — six months, one year or five years — and then stays in place until the person contacts GamStop to remove it; failing that, the data is held through a further automatic seven-year period during which operators are told the person was previously excluded. A site outside the scheme does not shorten that term, and it cannot be relied on to respect it. The lawful way to end a British self-exclusion is to contact GamStop.

Questions the Search Box Keeps Asking

Are there online casinos not on GamStop that accept UK players?

Yes, in the sense that offshore sites do accept British registrations, and no in the sense that matters legally. Any operator accepting customers in Great Britain needs a Gambling Commission licence; the Commission said on 21 October 2024 that offering commercial gambling services here without one is illegal, including where the operator holds a licence elsewhere. Refusing a British player, on the other hand, is the mark of an operator taking its licence seriously.

Which is the best online casino not on GamStop — how do I judge?

Judge the regulator, not the bonus. Malta requires EUR 100,000 of paid-up capital for its main B2C licence classes and publishes a list of Unauthorised URLs; Curaçao has just rebuilt its regime and is still standing up domain verification; Anjouan's own record includes a former Comorian attorney-general calling its licensing entity "an illegal entity". A high multiplier on a weakly licensed site is a promise with no enforcement behind it.

What is a uk online casino not on GamStop free spins no deposit offer actually worth?

Usually less than the headline. No-deposit bonuses carry the heaviest terms in the market — trade comparisons put them at 40 to 60 times wagering with a €50 to €100 cashout cap, though the range is unconfirmed. One large operator states that redeeming two or more no-deposit bonuses in a row can result in removal of subsequent winnings. Read the cashout cap before the multiplier; it is the clause that decides the outcome.

Is a new online casino not on GamStop safer than an older one?

Not automatically. A newly licensed Curaçao operator may hold a licence issued under the 2024 framework, which is genuinely stricter than the old sub-licence arrangement, but the authority's verification portal has been offline since October 2026, so the checking is harder than it was. Age of business matters less than whether the licence is current and verifiable, and whether the site names a dispute route with real providers behind it.

Do offshore casinos have to apply the UK bonus cap?

No. The cap at 10 times on wagering requirements in bonus funds took effect on 19 January 2026 through social responsibility code 5.1.1, and it binds Commission licensees only. The same code bans incentive offers mixing two or more gambling products. Offshore operators in Curaçao, Anjouan and Malta are not bound by either rule, and the Commission's own consultation noted that some licensees had applied terms up to 60 times before the limit.

Can an offshore site help someone get around a GamStop exclusion?

It can accept a registration where a British-licensed operator cannot, which is a different thing. A GamStop exclusion holds for its full term and then remains in place until the person contacts GamStop to remove it, and the scheme is explicit that it cannot prevent access to operators that do not participate. The Commission's January 2025 warning notice said such sites often target people who have self-excluded and may have weak social responsibility and anti-money-laundering controls.

The Short Version

Offshore does not mean unlicensed, but it does mean unBritish — different rules, a different regulator, and no route back through the Commission, the approved dispute providers or the national helpline when a term is applied that no British licence would permit. The comparison is not philosophical: 96.3 per cent of withdrawals automated at large British operators, a hard 10-times cap on wagering, a self-exclusion register holding 614,738 people as of July 2026, and an Anjouan licence costing EUR 17,828 a year as the only thing standing between a player and a term of service written entirely by the operator.