Non GamStop Sites and Regulatory Enforcement

Updated November 2026
Licensed
usAvailable in US
Fast payouts
18+ Only

Non GamStop sites are gambling websites that do not take part in the UK's self-exclusion scheme, because they hold no Gambling Commission licence. They are not licensed in Great Britain, UK player protections do not apply to them, and the Commission treats them as illegal operators, disrupting them through cease and desist notices, registrar and host referrals, and search-engine removals.

The promise in the phrase is simple enough: a casino that will still open an account for someone the British licensed market has closed its doors to. That is not a loophole. It is a description of an unlicensed operator, and the Commission has been blunt that offering commercial gambling to consumers in Great Britain without a Commission licence is illegal — including where the operator holds a licence somewhere else entirely.

The scheme itself is easy to state plainly. GamStop — often typed "gamestop", which is the spelling the search engines see most — is the national online self-exclusion register, run by The National Online Self Exclusion Scheme Limited. It was set up in June 2017 at the request of DCMS and the Gambling Commission, went live on 27 April 2018, and was renamed Gamstop Online in November 2025 after a website update. Since 31 March 2020 every online operator must be part of it as a condition of its licence, under social responsibility code provision 3.5.5 of the LCCP. Operators must check their whole customer base against the register at least every 24 hours. Registration is free, takes a few minutes and blocks gambling with all GB-licensed online operators for six months, one year, five years or five years with auto-renewal, though the block can take up to 24 hours to bite.

One thing needs saying early, because it is the hinge on which the whole subject turns. A self-exclusion holds for its full term and then stays in place until the person contacts GamStop to remove it. An offshore site is not a way round it. It is a way of gambling outside the system that was built to hold it. From 13.11.2026, 561,983 people were actively excluded at the end of 2025 and 614,738 were on the register by July 2026, so the population this market is aimed at is hardly marginal.

Where to get help, without decoration: the National Gambling Helpline, operated by GamCare, is free on 0808 8020 133, 24 hours a day, every day of the year, with live chat and WhatsApp on the same number. Callers in Wales are given 0808 2819 265.

Table of Contents9

The Numbers Behind the Licence Question

The Commission's Illegal Markets team has published the receipts. Since April 2024 it has issued 3,140 cease and desist and disruption notices — 2,032 cease and desist notices, 774 registrar referrals, 402 host referrals and three payment provider referrals — and referred 447,778 Bing and Google URLs, securing 287,961 removals. Across 160 illegal gambling websites with traffic data, engagement fell by an average of 32 per cent after disruption.

That average hides the useful part. By method, registrar blocks and website suspensions produced an average fall in engagement of 91 per cent each, against 60 per cent for GEO IP blocking, 52 per cent for Bing removal, 30 per cent for Google removal and 8 per cent for Facebook removal. The Commission's own reading is that search-engine removal makes a site harder to find but does not block access; cutting the domain or the hosting is what actually stops people. The enforcement tempo has picked up sharply: 226 websites referred to search engines in January to March 2026, 366 in April to June 2026 (147,721 URLs), then 1,835 in July to September 2026 covering 7,677,211 URLs, alongside 546 cease and desist notices in that last quarter.

Prosecutions, by contrast, have not followed. Across April 2025 to March 2026 every quarter recorded zero or one prosecution commenced — one in total, in October to December 2025. The disruption is administrative. Anyone weighing the risk of using an unlicensed site should read that asymmetry correctly: what the Commission reliably does is make the site hard to reach and hard to fund, not chase its owners through a courtroom.

There is a benchmark worth carrying around. The Commission's analysis published on 5 November 2026 estimated that among adults who had gambled online in the past four weeks, 2.5 per cent had engaged with illegal gambling websites, with a further 1.5 per cent in the past 12 months. Across the whole population including non-gamblers, 0.6 per cent had done so in four weeks and 94.4 per cent showed no indication of using one at all. That is the honest size of the market — a small minority, heavily targeted, and not the vast parallel economy the affiliate pages imply. Its dashboard recorded 586 illegal gambling websites accessible to GB consumers in September 2026.

Best Non GamStop Sites, Non GamStop Gambling Sites, and Non GamStop Casino Sites in 2026

The phrase "best non GamStop sites" does a lot of work in search results, and almost all of it is unearned. There is no register of good unlicensed operators. What exists is a spectrum, and it is easier to judge by which licence sits behind the site than by anything on the site's own homepage.

Three broad groups are worth separating.

Offshore regulators with published rules

Curaçao, Anjouan and Kahnawà:ke all run licensing regimes with public terms, published fee schedules and some form of certificate verification. Curaçao's National Ordinance on Games of Chance took effect on 24 December 2024, replacing the old master-licence model with direct licensing by the Curaçao Gaming Authority; the legacy "orange" sub-licences ended on 15 October 2025, and licensing ceased for the four former master licensors between 18 August 2024 and 31 January 2025. A historic /JAZ number is no longer proof of anything current. Kahnawà:ke has regulated interactive gaming since 1999 and runs a Logo Certificate Programme that generates a Certificate of Good Standing when clicked. Anjouan publishes a fee schedule — EUR 17,828 for B2C issuance and the same for annual renewal, with EUR 500 per additional domain — and requires segregated player funds, certified random number generators and AML controls.

Anjouan is also where the trade's copy starts to strain. An ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around EUR 17,000 each per year, and that Comoros financial intelligence officials described Anjouan Corporate Services as operating illegally; a former attorney-general of the Comoros called the licensing entity "an illegal entity". Anjouan Gaming itself said on 10 June 2026 that its licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world". That sentence is the whole point. A licence from a small jurisdiction does not make a site legal in Great Britain, and no offshore regulator claims otherwise.

Sites with no meaningful licence at all

Costa Rica does not operate a comprehensive gambling licensing regime; the "data processing licence" that circulates in marketing copy is not a licence in the strict legal sense. Its Legislative Assembly rejected Bill No. 25,057 in early 2026 — the bill that would have introduced mandatory licensing. Under Costa Rican law, games of chance depending primarily on luck are generally prohibited, and only land-based casinos integrated into qualifying hotels are authorised. A site waving a Costa Rican registration is not waving a licence. It is waving a company registration.

Sites that were licensed in Britain until recently

This is the group people miss. The Commission reported in May 2025 that TGP Europe was leaving the GB market following an investigation, that the sites it operated were now unlicensed, and that it had contacted five football clubs about sponsorship arrangements with unlicensed gambling businesses. A white-label site with a familiar look and a British-facing domain can lose its licence without changing its appearance. The public register is the only reliable test.

Licence behind the siteWhat it publishesWhat a player notices on withdrawal
Gambling Commission (GB)Full licence conditions, LCCP, published enforcement and settlement noticesWithdrawal processing, no maximum withdrawal cap, dispute route to approved ADR free of charge
Curaçao Gaming AuthorityLicence fee schedule, two seal types, register-based certificate verificationTerms set by the operator; no GB dispute route; funds held under operator's own terms
AnjouanFee schedule, certificate QR verification, requirement to name an ADR providerComplaints to a designated ADR provider expected to be resolved within 30 days first
Kahnawà:kePermit-holder list, Logo Certificate Programme, Dispute Resolution OfficerContractual relationship; voluntary self-exclusion described as permanent and irrevocable
Costa Rica / none statedNothing that functions as a licenceNothing published to check; terms are the whole argument

The Identity Check That Turns Up at Withdrawal

If there is one mechanical thing this subject turns on, it is when a site asks who you are.

On a British-licensed site, licence condition 17 has required information establishing identity — name, address and date of birth at minimum — to be obtained and verified before a customer is permitted to gamble, and the Commission now expects identity and age checks to be brought forward rather than sprung later. A remote casino may run what the Commission calls the "hybrid approach": identify at registration and defer full verification to the €2,000 threshold set by the Money Laundering Regulations 2017. Either way, the obligation to verify exists from the start.

Offshore, the same dance happens with a different tune. Many operators identify at signup and only demand documents when a withdrawal lands, which is why the sequence feels like a trap even where the rule is written down. The Commission has been caustic about this: licence condition 17.1.1 says a withdrawal request must not result in a requirement for additional information if the licensee could reasonably have requested it earlier, and the Commission's own blog in August 2026 recorded that over a quarter of complaints reaching its Contact Centre concern identity verification, raised when documents are demanded only at the point of withdrawal. Since April 2020 operators must also check their entire customer base against GamStop at least every 24 hours.

Warning signs are consistent. A site that asks nothing at deposit and everything at withdrawal. A site that accepts a name spelled slightly differently from the bank account. A site that treats a middle name as a usable substitute for a forename — the Commission's August 2026 blog flags exactly this, noting that onboarding on partial information creates mismatches with records held elsewhere, including GamStop, which undermines the self-exclusion it was meant to enforce. A site that will not state, in writing before the first deposit, which documents it may want and when.

The first time is usually painless. It is the fourth or fifth time, when the balance is worth having, that the terms get read properly.

Five Signs an Offshore Operator Can Be Trusted

None of these makes an unlicensed site legal in Great Britain. They separate operators who keep published rules from those who keep only a marketing budget.

The licence can be verified at the regulator, not on the site

A clickable CGA Certificate of Operation Seal must redirect to the Curaçao Gaming Authority's official register; if it differs in design, colour or format, the site is not authorised. If the certificate behind the seal names a different domain from the one being browsed, the site is displaying another operator's certificate. Kahnawà:ke's logo generates a Certificate of Good Standing on the click. Anjouan certificates carry a unique licence number and a QR code linking to the public register, and Anjouan states that certificates which cannot be verified through that register should not be relied upon. A seal that is an image rather than a link is decoration.

The terms name the ADR provider and it exists

Anjouan requires licensees to designate an Authority-approved ADR provider and to publish its name and contact details in player-facing terms; the providers currently approved are EGIS ADR, Axion ADR, iGaming ADR and a corporate ADR entity. Kahnawà:ke employs a full-time Dispute Resolution Officer. If the terms say disputes are resolved "at our discretion" and name nobody, there is no dispute route. That is the check.

Player funds are stated as segregated, in writing

Anjouan's standards require operators to segregate player funds from operational funds. That is a published rule, not a guarantee. On the British side the comparison is instructive: even a UK-licensed operator must give the customer a written disclosure of its insolvency rating — "not protected", "medium protection" or "high protection" — with an operator rated "not protected" required to remind the customer every six months, stating the value of funds held. A separate client account does not mean money comes back if the business fails, and gambling businesses are legally permitted to hold customer funds in overseas bank accounts. An operator that says nothing about any of this has told you something.

The bonus terms are complete, doable and readable

Offshore welcome offers commonly carry wagering of 25× to 50×, and no-deposit bonuses 40× to 60× with a cashout cap; the UK cap of ten times, in force since 19 January 2026 under SR code 5.1.1, applies to British licensees and to nobody else. Read for three things: whether the multiple attaches to the bonus or to bonus plus deposit, which games contribute and at what percentage, and whether there is a maximum cashout. Kahnawà:ke, for what it is worth, requires that the licensee's relationship with players be free of terms that are unfair or unreasonable.

The check on self-exclusion is real

The Commission issued an industry warning notice on 20 January 2025 about casino games supplied by licensed operators appearing on unlicensed websites available to GB consumers, noting such sites often target customers who have self-excluded and may have inadequate social responsibility and AML controls. An operator that actively advertises itself as a place GamStop cannot reach has answered the question before you ask it. A GAMSTOP exclusion cannot be cancelled during its term, and it stays in place after the term ends until the person contacts GamStop to remove it. No offshore licence changes that arithmetic.

How to Judge One Without Gambling on It

Six steps. All of them are reading and checking, none of them require an account.

  1. Read the licence claim, then verify it at the source. Find the regulator's name in the footer, then go to that regulator's own register or certificate-verification page and look for the domain. Reason: seals are copied far more often than licences are issued, and both Curaçao and Anjouan publish the fact that an unverifiable certificate proves nothing.
  2. Check the Gambling Commission public register anyway. Search the site's domain and business name. Reason: a site that left the GB market can keep a British-looking brand and a British-looking domain indefinitely, and the Commission's May 2025 notice about one operator leaving the market is the pattern to keep in mind.
  3. Read the withdrawal section of the terms before the bonus section. Look for maximum withdrawal caps, withdrawal frequency limits, processing fees and the identity-check trigger. Reason: withdrawal friction is the single most complained-about issue in this market — the Commission recorded 2,416 complaints coded to withdrawals and financial transactions in the year to December 2022, falling to 1,791 in the year to December 2025 — and it is where offshore terms diverge most from British ones.
  4. Check the ADR provider named in the terms and confirm it is on the regulator's approved list. Reason: a dispute route that exists only in prose is not a dispute route. On the British side, an operator must let a customer refer an unresolved dispute to an approved ADR entity free of charge after eight weeks, and must not use terms restricting the right to go to court.
  5. Look for the self-exclusion and responsible-gambling pages, and read what they promise. Reason: Kahnawà:ke states that its voluntary self-exclusion is permanent and irrevocable and that a player who breaches it forfeits deposited funds to a charity chosen by the Commission — a harsher rule than GamStop's, and one worth knowing before relying on it.
  6. Note the payment methods and the currency, then stop. Reason: licence condition 5.1.2 requires British licensees to accept payment only from a provider that is a payment service provider under the Payment Services Regulations 2017, and credit cards have been banned for gambling since 14 April 2020. An offshore site leaning on methods British licensees cannot use is telling you which rulebook it is working from.

Two Regulators, Two Speeds

The comparison people actually want is between what happens when something goes wrong on a British site and on an offshore one. The difference is not philosophical. It is procedural, and it is measurable.

On the British side: eight weeks inside the operator's own complaints process, then a free referral to an approved ADR provider if unresolved. The approved list is ADR Group, Pegasus ADR Service, another approved ADR entity, CEDR, eCOGRA, IBAS, ProMediate and Tattersalls Committee. The volume is small and the outcomes are knowable. eCOGRA's report for 1 October 2024 to 30 September 2025 recorded 911 disputes received, of which 150 valid disputes concerned deposits and withdrawals, an average domestic resolution time of 31 days, and 17.8 per cent of completed disputes decided for the consumer. IBAS's 2024-25 report recorded 3,721 domestic disputes, 217 of them banking and financial, an average completion time of 20 days, and 100 per cent operator compliance with decisions in the consumer's favour in both 2023-24 and 2024-25.

On the offshore side there is a designated ADR provider if the licence requires one, a 30-day expectation before escalation under Anjouan's rules, and no equivalent published statistics. The Commission also cannot help: it is a regulator, not an ombudsman, and it cannot resolve individual complaints or retrieve money. Its remit covers only websites that trade or advertise to customers in Great Britain, which is to say sites holding a Commission licence.

One further asymmetry deserves pointing out, because the trade press rarely does. British rules have been tightening in the player's favour on exactly the points offshore sites lean on. Financial vulnerability checks became a licensing requirement on remote operators in August 2024 at £500 net deposits over 30 days, lowered to £150 from 28 February 2025. From 31 October 2025 operators must prompt customers to set a financial limit before their first deposit. Financial Risk Assessments start in stages from 7 July 2026, beginning at £5,000 net deposits in a rolling 24 hours for over-25s and £2,500 for under-25s, and arriving at £1,000 in 24 hours or £3,000 in 90 days for over-25s at the final stage — thresholds fewer than 0.5 per cent of customers currently exceed at that first stage. Reverse withdrawals were banned outright from 31 October 2021: no operator may give a customer the option to cancel a withdrawal request. And LCCP licence condition 17.1.1 is the one that should be printed on every offshore comparison table, because it has no counterpart there at all: a withdrawal request must not result in a demand for information the licensee could reasonably have sought earlier.

The sting is this. The British market is imperfect — the Commission says withdrawal issues remain the cause of most of the complaints it receives, and its 2024-25 annual report says so in as many words — but every complaint it receives is a complaint it records, refers and can act on. Offshore, the same complaint goes to a provider chosen by the operator and a regulator with no power in this jurisdiction at all.

The Market Nothing in Britain Can Reach

Non GamStop sites exist as a category because a licensing condition created the boundary: participation in the national scheme is compulsory for GB licensees and meaningless for everyone else. That is why the phrase is durable.

It is worth being precise about the scale, because both sides inflate it. H2 Gambling Capital estimated the amount staked with illegal operators in the UK reached £16.6 billion in 2025, up from about £5 billion in 2019, with the legal share of gambling falling from 97 per cent to 92 per cent. Frontier Economics, working for the Betting and Gaming Council, put black-market online stakes at £2.7 billion a year, some 2.1 per cent of regulated remote stakes. A separate analysis for the Campaign for Fairer Gambling put 9 per cent of GB online gross gaming revenue unregulated in 2025. The Commission's own survey work, published on 5 November 2026, estimated 2.5 per cent of recent online gamblers had engaged with an illegal site in the past four weeks.

Those figures cannot all be right, and the Commission has said its methodology does not capture activity hidden by VPNs. What can be said with confidence is that the Commission's dashboard recorded 311 illegal websites disrupted in Quarter 2 of 2026 to 2027, 38 per cent more than the previous quarter, with 77 per cent of disrupted sites seeing reduced estimated traffic. Disruption works on traffic. It does not work on the person who has decided the register does not apply to them, and the register does apply — for the full term, and then until they contact GamStop to remove it.

GamStop Online's own numbers show a scheme being used heavily and in earnest: 117,756 new registrations during 2025, 58,675 in the final six months of that year at an average of 319 a day, a 16 per cent year-on-year rise in the first half of 2026 and a monthly record of 12,236 sign-ups in May 2026. Of the periods chosen in 2025, 29 per cent picked six months and 22 per cent picked auto-renewal; by July 2026 more than one in two on the register had taken the maximum five years. An exclusion holds for its full term and stays in place afterwards until the person contacts GamStop to remove it. That is not a technicality — it is the design.

Where to get help, one last time. The National Gambling Helpline, run by GamCare, is free on 0808 8020 133, 24 hours a day, every day of the year; callers in Wales are given 0808 2819 265. Citizens Advice gives free, confidential help with gambling-related debt, and Citizens Advice Scotland runs a support line on 0800 328 1131, Monday to Friday, 10am to 3pm. Gamblers Anonymous England, Wales & Ulster is on 0330 094 0322. GamFam supports families and friends of gamblers. The NHS National Gambling Clinic accepts referrals and is on 020 7381 7722. Blocking software is a separate layer: GamStop signposts Gamban and BetBlocker, and BetBlocker states it blocks over 1,368,000 gambling websites and 3,100 apps free of charge without registration.

Frequently Asked Questions

Are non GamStop sites legal?

They are not licensed in Great Britain, and the Commission states it is illegal for anyone to offer commercial gambling services to consumers here without a Commission licence, including where the operator holds a licence in another jurisdiction. Section 33 of the Gambling Act 2005 makes providing gambling facilities without an operating licence an offence carrying up to 51 weeks' imprisonment, a fine or both. The offence attaches to the operator, not to the adult player.

What are the best non GamStop sites UK players can check?

There is no approved list, and any page offering "best non GamStop sites" is ranking them by commercial arrangement. The only test worth applying is the licence behind the site: Curaçao's CGA, Anjouan or Kahnawà:ke all publish registers or certificate-verification tools, so the claim can be checked at the source rather than taken from the operator's own footer. A Costa Rican registration is not a licence.

Do non GamStop casino sites with PayPal exist?

Effectively no. British licence condition 5.1.2 requires licensees to accept payment only from a provider that is a payment service provider under the Payment Services Regulations 2017, and PayPal operates as one in this market. The big e-wallets and card processors are constrained by the same rulebook and by the Commission's referrals to payment providers, which is why unlicensed sites cluster around crypto and smaller e-wallets.

Can a non GamStop site get round a self-exclusion?

No. A self-exclusion holds for its full term and then stays in place until the person contacts GamStop to remove it, and it cannot be cancelled during the term. An offshore operator simply sits outside the scheme: it never received the block because it holds no Commission licence. The Commission's January 2025 warning notice said such sites often target customers who have self-excluded, and reported a 32 per cent average fall in engagement after disruption action.

How does the regulator tackle unlicensed sites?

Through disruption rather than prosecution. Since April 2024 the Illegal Markets team issued 3,140 cease and desist and disruption notices, referred 447,778 Bing and Google URLs and secured 287,961 removals. Registrar blocks and suspensions cut engagement by 91 per cent on average, against 30 per cent for Google removal. Prosecutions are rare: one was commenced across April 2025 to March 2026.

Do non GamStop bingo and poker sites differ from casino sites?

Less than the marketing suggests. Bingo and poker are additional products under the same licence, and the differences that matter sit in the terms: table and card games typically contribute 10 to 20 per cent towards wagering, roulette and baccarat 5 per cent, and live dealer and craps often nothing at all, which is where bonus value quietly disappears. The licence check, the ADR provider and the identity-check timing are the same questions.

What the Regulator's Own Figures Say

The honest summary is that non GamStop sites are not a secret corner of the market and not a loophole in the self-exclusion scheme; they are the part of the market that sits outside British licensing, and the Commission's response is administrative disruption at a scale that keeps rising — 1,835 websites referred to search engines in July to September 2026 alone, covering 7,677,211 URLs — rather than criminal prosecution, of which there was exactly one commenced in the twelve months to March 2026. Meanwhile the scheme those sites are aimed at keeps growing: 614,738 consumers on the register as of July 2026, of whom more than one in two had chosen the maximum five-year exclusion.

Material created by the team quickwithdrawalcasinos.com