Mobile Casino Not on GamStop and the Regulatory Pursuit of Unlicensed Sites

A mobile casino not on GamStop is a site with no Gambling Commission licence, so the national self-exclusion scheme does not reach it and British protections do not apply. Payment by mobile phone bill is one of the routes such sites use to take deposits quickly. It is not a way round a self-exclusion.

The phrase "not on GamStop" is often typed "gamestop", which tells you something about the way the market is searched rather than about the scheme itself. I have spent years reading the paperwork that comes out of the Gambling Commission, and the file on unlicensed mobile casinos is one of the more revealing ones, because the regulator keeps publishing what it does and the numbers keep getting larger. In September 2026 it identified 586 illegal gambling websites accessible to British consumers. In the three months to September 2026 it referred 1,835 websites to search engines — 7,677,211 URLs — and issued 546 cease and desist notices to illegal operators. Those are the totals for a single quarter. The traffic to them, incidentally, is mostly small: among adults who had gambled online in the past four weeks, the Commission estimated that 2.5 per cent had engaged with an illegal gambling website, and a further 1.5 per cent within the past year. So this is a minority pursuit with a very loud search presence. Pay-by-mobile sits at the sharp end of it, because the billing is quick, the identity behind the SIM is thin, and the money leaves before anybody has asked a question.

This page looks at the subject from one angle throughout: what the regulator actually does about unlicensed sites, and what that means for the parts of the offer that look convenient. It applies as of 13.11.2026.

Pay by Mobile Casino Not on GamStop and How Billing Works

The offer is simple enough. Instead of a card, the deposit is charged to the mobile phone bill, or deducted from prepaid credit, and the money appears in the casino account within seconds. No card number, no bank login, no waiting for a payment provider to authorise anything.

The appeal to an operator with no British licence is obvious. Card payments to gambling merchants are heavily policed. The Commission has reported payment transaction data to the Visa Operator Scheme since January 2025, describing it as a critical and still early-stage part of its financial disruption strategy, and it has made four referrals in total, the first following a test purchase on an unlicensed website. A phone bill, by contrast, is not a gambling transaction in the ordinary sense. It is a charge for a digital service, aggregated and collected by the mobile operator, and it does not always travel through the same rails.

There is a second reason pay by mobile suits this market. The UK-licensed way of doing things has moved decisively towards asking who you are before you stake anything. The Commission says plainly that identity and age checks should be brought forward to before a customer deposits or stakes, and that onboarding on incomplete or inaccurate information — initials instead of full names, nicknames, commercial addresses instead of residential ones — is not sufficient. A site that asks for a mobile number and nothing else has quietly skipped that step. Under British rules it could not.

And the sums involved are small enough to look harmless. That is the point. Pay-by-mobile deposits are typically modest, the losses accumulate quietly, and because the charge arrives inside a phone bill rather than as a separate line on a bank statement, they are easy not to notice. A player who cannot see the money going out cannot react to it.

Mobile Casinos Not on GamStop and the Licence Verification Problem

Every unlicensed site will show you a licence. That is not the interesting question. The interesting question is what the licence is worth and whether the number on the certificate matches the domain in front of you.

Start with the baseline. Section 33 of the Gambling Act 2005 makes it an offence for a person to provide facilities for gambling without an operating licence, punishable on summary conviction by up to 51 weeks' imprisonment, a fine not exceeding level 5, or both. The Commission states that it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence, and that this includes an operator licensed in another jurisdiction. Its own remit only covers sites that trade with or advertise to British customers, and those must hold a Commission licence — which is why a Maltese, Curaçao or Anjouan certificate is not the same thing, whichever way the marketing words it.

Then look at what those certificates cost, because the fee tells you how much scrutiny is behind them. A Curaçao B2C licence application fee is a one-time non-refundable EUR 4,592, and the total annual fee is EUR 47,450. An Anjouan B2C licence is EUR 17,828 for issuance and the same again for annual renewal. An MGA B2C licence is a EUR 5,000 application fee, a EUR 25,000 annual licence fee, and gaming tax of 5 per cent of gaming revenue, against minimum paid-up share capital of EUR 100,000 for the main B2C types. None of that is a judgement on the regulators as such. It is a judgement on what a licence proves: a small annual fee and a self-declared domain gives you a certificate, not a supervisor watching the withdrawal queue.

Curaçao is the clearest case of a regime that has been rebuilt and left a trail of invalid paperwork behind it. The National Ordinance on Games of Chance took effect on 24 December 2024 and made the Curaçao Gaming Authority the direct licensing authority, ending the old master-licence and sub-licence model. The legacy "orange" sub-licence certificates ended on 15 October 2025, and the CGA states that a historic /JAZ number or legacy seal must not be treated as independent proof that an operator currently holds a valid licence. The certification policy adds the test anyone can run in ten seconds: clicking a genuine Certificate of Operation Seal must redirect to cert.cga.cw, and if the certificate behind the seal shows a different domain name from the site being accessed, the site is displaying another operator's certificate and should be treated as unauthorised or fraudulent. The CGA also announced on 7 October 2026 that its previous portal would not return to service and that it was working on an alternative way to verify licensed domains.

Anjouan is the other name that appears on a great many of these sites. Its published fee is EUR 17,828 a year, and an ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences, and that Comorian financial intelligence officials described Anjouan Corporate Services as operating illegally. The authority itself said on 10 June 2026 that "An Anjouan Internet Gaming Licence is not, and has never been presented as, a universal authorisation to operate in every country in the world". Read that sentence twice. It is the regulator of the licence disclaiming the one use the marketing makes of it.

Malta sits at the respectable end, and the difference is instructive. The MGA publishes a list of Unauthorised URLs, declaring it has no connection with those domains and that any reference to the MGA or a Maltese licence on them is false and misleading, with entries carrying notice dates of 30 October 2026. Kahnawà:ke has regulated interactive gaming since 1999 and offers a Logo Certificate Program: click the Commission's logo on a site and it generates a Certificate of Good Standing confirming whether that site holds a valid permit. Where a regulator bothers to give players a verification tool, use it. Where it does not, ask why.

Finally, there is Costa Rica, whose name appears on sites that hold nothing at all. It operates no comprehensive gambling licensing regime; the "data processing license" sometimes cited in the industry is not a licence in the strict legal sense, and the Legislative Assembly rejected Bill No. 25,057 in early 2026, which would have introduced a mandatory regime. That is not a licensing jurisdiction. It is a postal address.

What Mobile Phone Bills Do Not Show

The mobile bill is thin evidence of anything. It cannot show whether the deposits are affordable, it cannot flag a pattern before the pattern is expensive, and it does not connect to any of the machinery that British licence conditions have quietly assembled.

Consider what that machinery does. Financial vulnerability checks became a licensing requirement for remote operators in August 2024 at a threshold of £500 net deposits over a rolling 30 days, and the threshold was lowered to £150 effective 28 February 2025. In the three months after the requirement, operators ran those checks on an average of 7 per cent of active customer accounts, with 78 per cent of checks returning within 10 minutes. Financial Risk Assessments are coming in stages, beginning with the largest operators at £5,000 net deposits in a rolling 24-hour period for customers aged 25 and over and £2,500 for under-25s, moving towards £1,000 in 24 hours or £3,000 over 90 days at the final stage. One pound of that supervision exists on an offshore site.

Then there is the withdrawal end, which is where the two markets diverge most sharply and where the Commission's own figures are worth reading slowly. Data covering June to September 2024 recorded 44.2 million withdrawals by customers of large online operators; 96.3 per cent cleared automatically and a further 3.5 per cent within 24 hours. Not perfect, but a recognisable standard. Against that, the Commission's Contact Centre has received around 2,000 complaints a year about withdrawal delays, and in its Annual Report and Accounts 2024-25 it states that, despite work with some operators, issues relating to withdrawals continue to be the cause of most of the complaints it receives. Over a quarter of complaints now concern identity verification. Which is the whole shape of the problem: the moment money is owed rather than taken, the questions start.

Two rules make that harder in Britain than it used to be. Reverse withdrawals were permanently banned by requirement 14B, "Consumers must not be given the option to cancel their withdrawal request", in force since 31 October 2021. And licence condition 17.1.1 provides that a customer's withdrawal request must not trigger a demand for additional information if the licensee could reasonably have requested it earlier — subject to obligations it must meet at that time, such as anti-money-laundering rules. Add licence condition 7.1.1, which requires terms to be fair under the Consumer Rights Act 2015, and the picture is of a regulator that has been steadily closing the gap between a deposit and a payout.

The enforcement record shows it is not theoretical. On 21 October 2026 the Commission announced that one licensee would pay £900,000 in a regulatory settlement for failures including unnecessarily delaying consumer withdrawals, specifically a term allowing only one withdrawal request at a time and manual review of every fifth or tenth withdrawal for some customers. In July 2025 another operator was fined £170,000 for failures including a bonus term reserving the operator's discretion to close accounts or forfeit winnings.

The industry's own dispute figures are the sting. eCOGRA's report for 1 October 2024 to 30 September 2025 records 911 disputes, of which 150 valid ones concerned deposits and withdrawals, and 17.8 per cent of completed disputes were ruled in the consumer's favour. IBAS's 2024-25 report records 3,721 domestic disputes, 217 categorised as banking or financial, an average completion time of 20 days, and 100 per cent operator compliance with decisions in the consumer's favour. That last figure is the one to hold on to. There is a mechanism, it works, and it is available because a licence makes it available. An offshore site has an ADR provider too — Anjouan currently approves EGIS ADR, Axion ADR, iGaming ADR and another operator, with operators expected to resolve complaints within 30 days — but the operator's compliance with a ruling is a matter of its own goodwill, and the ruling is enforceable nowhere.

How a Deposit and a Withdrawal Compare

The row that matters is the third. Everything about it is designed to make the first deposit frictionless and the first withdrawal a negotiation.

Why Identity Verification Is a Hurdle

Here is the thing this whole topic turns on. Unlicensed mobile casinos are not usually hard to join — they are hard to leave. The exit is blocked by identity verification, and that will be familiar to anyone who has ever been asked for a passport photograph after a win.

On a British-licensed site, the first time works like this. Licence condition 17, introduced on 7 May 2019, requires the licensee to obtain and verify information establishing identity before permitting the customer to gamble: name, address and date of birth at a minimum. In practice a company often verifies by matching the account against databases such as credit reference agencies and the electoral roll, in which case no documents are needed at all. The Commission says it cannot give a timescale because the length varies — electronic verification may be instant, while documents take longer.

There is a concession for remote casinos, the "hybrid approach": identify the customer and verify age at registration, then defer full verification to the €2,000 threshold in the Money Laundering Regulations. But the direction of travel is the other way. The Commission's August 2026 blog states that operators should bring identity and age checks forward to before a deposit or a stake, and expresses concern about "fuzzy matching" through third-party verification providers and about onboarding on partial or equivocal verification. One detail in that blog is worth dwelling on: onboarding a customer using a middle name instead of a forename can create mismatches with records held elsewhere, such as GamStop, undermining the effectiveness of self-exclusion. Standards here are not paperwork for its own sake; they are the mechanism that makes a block hold.

Offshore, the sequence is reversed, and it is reversed deliberately. Nothing is verified at sign-up. The withdrawal is where the demand arrives: proof of address, a selfie, sometimes a bank statement, with no eight-week clock and no adjudicator in the background. The Commission has said that where a business delays a withdrawal because of insufficient ID it may be in breach of licence condition 17, and that operators cannot confiscate a customer's funds because ID has not been provided. Those protections are structural, not moral. They exist because a licence can be taken away.

The warning signs are consistent:

• The terms reserve the operator's sole discretion to void winnings or close an account — the Commission's guidance treats "may" or "reserve the right" clauses of that sort as unfair under the Consumer Rights Act 2015.
• A maximum cashout applies to bonus winnings. One offshore operator's terms cap withdrawals from bonus-generated winnings at 300 per cent of the credited bonus amount, with the excess voided. British rules prohibit any maximum limit on withdrawals from a deposit balance.
• Wagering requirements run above ten times. Since 19 January 2026 the Commission's Social Responsibility Code 5.1.1 caps wagering at a maximum of ten times; the Commission noted that some licensees had applied up to 60 times.
• A maximum bet applies while wagering — one operator caps it at 5 euro or 5 dollars for regular players, and states that breaching it may mean account closure, forfeiture of the bonus and loss of winnings generated during wagering.
• Funds are rated "not protected" and the terms bury it. British operators must choose a customer-funds protection rating and disclose it in writing before funds can be used for gambling, and one rated "not protected" must remind the customer every six months.

Restrictions of the Mobile Offer

The one thing to take from this section is that the convenience is real and the record is not.

Mobile payment works, and it works fast. The cheapest fast transfers in the digital-asset world are genuinely fast — a TRON USDT transfer burns roughly 13 TRX without staked energy, and Litecoin's average block interval is about two and a half minutes — but those are the mechanics of a payment rail, not of a gambling account. Pay-by-mobile is even simpler: a phone number, a confirmation, and a balance.

What it does not carry is any of the obligations that attach to a licence. Where a British operator must prompt a customer to set a financial limit before the first deposit and make it easy to review, under changes effective 31 October 2025, with requirement 12E presenting the limit as the default option and requiring an action to decline, an unlicensed site has no such prompt, because no one is asking it to add one. Where a British operator must check its entire customer base against GamStop at least every 24 hours, which the Commission required from April 2020, an unlicensed site has nothing to check against.

And the regulator's strategy against those sites has a shape. Its Illegal Markets team reported that since April 2024 it issued 3,140 cease and desist and disruption notices — 2,032 cease and desist notices, 774 registrar referrals, 402 host referrals and 3 payment provider referrals — referred 447,778 URLs to Bing and Google, and secured 287,961 URL removals. Measured across 160 illegal websites, engagement fell by an average of 32 per cent after disruption. The method matters: registrar blocks and website suspensions produced the largest average fall in engagement at 91 per cent each, ahead of GEO IP blocking at 60 per cent, Bing removal at 52 per cent, Google removal at 30 per cent and Facebook removal at 8 per cent. GEO IP blocking produced a 60 per cent average fall across 53 domains and a registrar block 91 per cent across 8. The Commission says plainly that GEO IP blocking and registrar blocks are more effective than search-engine removals, because removal makes a site harder to find but does not block access.

That is the honest picture. Taking a site out of search results is the weakest tool available. Taking the domain away is the strongest. A pay-by-mobile offer on a domain that has already moved twice is not a service; it is a queue for one of those notices.

Five Signs a Mobile Casino Can Be Trusted

The Domain Is on the Regulator's Own Register

Check the Gambling Commission's public register and click through to confirm that the site's activities and domain names match what is listed. The Commission advises consumers to do exactly this before gambling. A licence number quoted in a footer without a matching register entry is decoration.

The Licence Certificate Resolves to the Right Place

A genuine Curaçao Certificate of Operation Seal must redirect to cert.cga.cw, and if the certificate behind it names a different domain from the one you are on, the site is displaying someone else's certificate. The MGA publishes a list of Unauthorised URLs it has no connection with. Kahnawà:ke's logo generates a Certificate of Good Standing. Verifying takes a click; not verifying takes a deposit.

Identity Checks Arrive Before the First Stake

If a site lets a customer deposit and play on nothing but a phone number, the absence is the finding. British licence condition 17 requires identity verified before gambling, and the Commission expects checks brought forward rather than deferred. A site that asks for documents only once money is owed has told you its priority.

The Withdrawal Terms Have No Ceiling and No Discretion

Look for a maximum cashout on bonus winnings, a one-withdrawal-at-a-time rule, or a clause letting the operator void winnings at its sole discretion. British guidance prohibits any maximum limit on withdrawals from a deposit balance, and treats sole-discretion clauses as unfair. The £900,000 settlement in October 2026 turned partly on exactly those terms.

The Help Route Is Real and Reachable

A trustworthy operator refers disputes to an independent adjudicator at no cost if a complaint is unresolved after eight weeks, under social responsibility code 6.1.1, and a consumer must have gone through the operator's own procedure first. Ask what happens after eight weeks. "We will look into it again" is not an answer; a named ADR provider is.

What to Check Before Using a Mobile Casino

1. Confirm the licence on the regulator's public register before anything else. Not the badge image, the register entry, matched against the exact domain in front of you. Commission guidance is explicit that the activities and domain names must correspond.
2. Read the customer-funds disclosure. British operators holding customer funds must state whether those funds are protected on insolvency and at what rating, in writing, before funds can be used for gambling. "Not protected" is a legitimate answer; an unmentioned one is not.
3. Look up the withdrawal section of the terms before depositing, not after winning. Check for maximum cashout clauses, per-withdrawal limits, manual review language and any discretion to void winnings. Those clauses are the ones you will meet at the worst possible moment.
4. Compare the wagering figure against ten times. Since 19 January 2026 British licensees cannot apply wagering requirements above ten times, and mixed-product promotions requiring two or more types of gambling are banned outright.
5. Note who adjudicates a dispute, and where. A British operator must offer free reference to an approved ADR provider if a complaint is unresolved after eight weeks; the Commission's approved list includes IBAS and eCOGRA, which have historically handled most gambling disputes. An offshore ADR ruling is not enforceable in Britain.
6. Get help early rather than late, and use the free services that exist. The National Gambling Helpline, run by GamCare, is on 0808 8020 133, 24 hours a day, every day; callers in Wales can use 0808 2819 265. Gamblers Anonymous England, Wales and Ulster is on 0330 094 0322, Citizens Advice Scotland's gambling support line is 0800 328 1131, and GamFam supports family and friends of gamblers. Blocking software is also available: BetBlocker states it blocks over 1,368,000 gambling websites and 3,100 apps, free and with no registration.

The GamStop Question, Answered Straight

Two facts get muddled in this market, so here they are plainly. GamStop is the national online self-exclusion scheme for Great Britain, run by The National Online Self Exclusion Scheme Limited, free to users, and required of every online operator as a licence condition since 31 March 2020. It has been renamed Gamstop Online following a November 2025 website update; the scheme is often typed "gamestop", and the correct spelling is GamStop. And an offshore site is not a route around an exclusion. It is simply outside the system that would have applied it.

The mechanism is worth stating, because the detail is where the protection lives. Registration blocks a person from gambling with all online gambling companies licensed in Great Britain for six months, one year, five years, or five years with auto-renewal. Signing up takes a few minutes but the block can take up to 24 hours to take effect. Once registered, the exclusion cannot be cancelled or deactivated during the period, and it stays in place after the chosen term ends unless the person contacts GamStop to remove it. Auto-renewal can only be switched off during the last six months of a five-year term, and continues for up to four further five-year periods. If nothing is done, GamStop holds the data through a further automatic seven-year self-exclusion period during which operators are told the person was previously excluded. I have watched registrations climb for years: 117,756 new registrations during 2025; 561,983 active exclusions at the end of that year; 614,738 consumers on the register as of July 2026, of whom more than one in two had chosen the maximum five-year term. Under-25s accounted for nearly one in three self-exclusions in the first half of 2026, a 26 per cent year-on-year increase. Those are people who have decided to put the machinery in place.

This is why the Commission's warning notice of 20 January 2025 matters more than the marketing. It warned about casino games supplied by licensed operators appearing on unlicensed websites available to British consumers, and noted that such sites often target customers who have self-excluded via GamStop and may have inadequate social responsibility and anti-money-laundering controls. If a site advertises the absence of self-exclusion as a feature, that advertisement is the proof of the point.

Land-based exclusion works differently, and the difference is instructive. Under LCCP ordinary code 3.5.2 a land-based self-exclusion must run for at least 6 and no more than 12 months, may be extended in periods of at least 6 months, stays in place for a further 6 months at the end of the chosen period unless the customer takes positive action to gamble again, and carries a one-day cooling-off period. SENSE covers licensed land-based casinos, with a minimum six-month period extendable to twelve months, and removal only in person at a casino during the six-month "Thinking" period that follows. Gamstop Betting Shops, previously MOSES, is telephone-based on 0800 294 2060, excludes a customer from named areas for a fixed 12-month term that cannot be ended early, and covers around 6,000 shops with over 60 operators. Every one of these schemes builds in delay by design, because delay is the entire mechanism. An unlicensed site builds in speed, for the same reason.

What the Regulator Does About Unlicensed Sites

The enforcement pattern is worth one more look, because it is not what most people assume. Across April 2025 to March 2026, every quarter recorded 0 or 1 prosecutions commenced — one prosecution in total, in October to December 2025. In April to June 2026 the Commission began 0 criminal investigations. This is not a regulator asleep at the wheel; it is a regulator that has concluded that removing access works better than prosecuting operators who are, in many cases, somewhere it cannot reach.

So the tools are registrar blocks, host referrals, geo-blocking, search-engine removals, payment referrals to Visa, and the referral of illegal gambling content to Meta, TikTok, X and YouTube — 84 illegal lottery URLs were removed from social platforms in April to June 2025, with 108 illegal lotteries referred. In the quarter January to March 2026 the Commission referred 226 websites to search engines and issued 98 cease and desist notices. By April to June 2026 that had grown to 366 websites and 147,721 URLs. By July to September 2026, 1,835 websites and 7,677,211 URLs, with 546 cease and desist notices. And in Quarter 2 of 2026 to 2027, 311 illegal websites had disruption actions taken against them, 38 per cent more than the previous quarter, with 77 per cent of disrupted sites seeing a reduction in estimated traffic.

The scale of the market those numbers describe is contested, and I think that contest is worth naming rather than smoothing over. H2 Gambling Capital estimates stakes with illegal operators reached £16.6 billion in 2025, up from about £5 billion in 2019, with the proportion of gambling happening legally falling from 97 per cent to 92 per cent. A Frontier Economics study for the Betting and Gaming Council conservatively estimated £2.7 billion staked annually online on the black market, 2.1 per cent of the £128 billion staked with regulated remote operators. Yield Sec's analysis for the Campaign for Fairer Gambling put unregulated online at 9 per cent of a £8.8 billion market in 2025. These figures differ by a factor of several, largely because each measures a different thing and none of them can see what a VPN hides. What they agree on is direction. The Commission's own methodology, published in October 2024, combines web-traffic data with a licensed-play assumption of £0.32 GGY per minute for online slots and states explicitly that it does not capture activity hidden by VPNs.

The Illegal Gambling Taskforce's terms of reference were published by DCMS on 13 May 2026 with three priorities: reducing payments to and from illegal operators, tackling online advertising of illegal gambling, and improving cross-agency enforcement. It runs for 12 months. Note the first priority. Payments are where this market is most exposed, and pay-by-mobile billing is precisely the payment route that sits furthest from the card rails the disruption strategy has learned to work with.

Help, and the One Number Worth Keeping

If gambling has become a problem for anyone, the free services are genuinely free and genuinely confidential, and none of them requires a British licence to be in place. The National Gambling Helpline, run by GamCare, is 0808 8020 133, 24 hours a day, every day of the year, reached by phone, live chat or WhatsApp. Callers in Wales can use 0808 2819 265. Gamblers Anonymous England, Wales and Ulster is on 0330 094 0322, with around 250 meeting locations and no appointment needed. Citizens Advice offers free confidential advice including help with debt, and Citizens Advice Scotland's gambling support line is 0800 328 1131, Monday to Friday 10am to 3pm. GamFam, a registered charity, supports the family and friends of gamblers through its five-stage GRA5P peer-support programme. The NHS National Gambling Clinic accepts self-referrals for young people aged 13 to 18 from anywhere in England, and for adults in Greater London and the South East. The National Gambling Helpline is not a crisis line, and staff cannot transfer someone at immediate risk of harm; they follow their own safeguarding procedures.

Frequently Asked Questions

Are mobile casinos not on GamStop legal?

The site is not licensed in Great Britain, so its operation here is outside the law: section 33 of the Gambling Act 2005 makes it an offence to provide gambling facilities without an operating licence, and the Commission says that applies even where the operator holds a licence elsewhere. Playing is not the offence; providing is. The consequence is that no British protection reaches the account.

Why do offshore sites push pay by mobile phone bill?

Because a phone bill is charged as a digital service rather than as a gambling transaction on a card, it travels further from the payment rails the Commission polices. The Commission began reporting transaction data to the Visa Operator Scheme in January 2025 and has made four referrals since. Mobile billing is the route that strategy has learned least about.

Does a casino pay by mobile not on GamStop check identity?

Usually not on the way in. Offshore sites typically collect a phone number and little else, then request documents at the first withdrawal. That reversal is the crux of the problem: British licence condition 17 requires identity verified before a customer is permitted to gamble, and the Commission expects checks brought forward to before the first deposit or stake.

Can a pay by mobile casino help me get round a self-exclusion?

No. A GamStop exclusion holds for its full term — six months, one year, five years or five years with auto-renewal — and then stays in place until the person contacts GamStop to remove it. It cannot be cancelled during the period. An offshore site is not a way around it; it is simply outside the scheme, and the Commission warned in January 2025 that such sites often target self-excluded players.

What can I do if an offshore mobile casino won't pay out?

Very little, and that is the honest answer. British route: the operator's complaint procedure, then free reference to an approved ADR provider if unresolved after eight weeks. Offshore, the ADR provider the licence names has no power in Britain. LCCP condition 17.1.1 and the prohibition on unfair terms exist because a licence can be withdrawn; without one, there is nothing to withdraw.

Is mobile deposit casino not on GamStop safer with crypto?

No, and the mechanics show why. Crypto settles fast — a Litecoin block arrives on average every two and a half minutes — but speed is a payment, not a protection. Nothing verifies the account holder, nothing checks affordability, and the Commission's 2026 risk assessment notes rising exposure to e-wallets, prepaid methods and funds linked to cryptoassets. The exit problem is unchanged.

The Convenience Is the Product, and That Is the Problem

A mobile casino not on GamStop sells speed — a deposit in seconds, billing through a phone, no questions — and everything that makes the deposit frictionless is engineered to make the withdrawal slow, which is why the regulator's own answer to these sites has stopped being prosecutions and become domain blocks. Across April 2025 to March 2026 every quarter recorded 0 or 1 prosecutions commenced, while in July to September 2026 the Commission issued 546 cease and desist notices and referred 1,835 websites to search engines. That ratio is the finding. And a registrar block produced an average 91 per cent fall in engagement — the strongest tool the Commission has, against a site that asked for nothing but a phone number.