Online casinos not on GamStop are offshore operators holding no Gambling Commission licence, so the national self-exclusion scheme has no hold over them, the credit-card ban does not apply and there is no British regulator to complain to. Betting with one is not a criminal offence for the player; providing it in Great Britain without a licence is.
The first thing worth saying plainly is that "not on GamStop" is not a feature. It is a description of an absence — of a licence, and of everything the licence carries with it. The phrase sells well because GamStop is the most visible piece of consumer protection in British gambling: more than 614,738 people were on the register as of July 2026, and most of them chose the longest term available. A casino outside that system is, by definition, outside the enforcement machinery that gives GamStop its teeth. GamStop is often typed "gamestop", which tells you how firmly the word has lodged in the nationalulary.
The Gambling Commission does not ignore these sites. Its Illegal Markets team has been busy: 3,140 cease and desist notices and disruption notices since April 2024, 447,778 search-engine URLs referred, 287,961 removals secured. Across 160 illegal gambling websites with traffic data, average engagement fell 32 per cent after disruption. That is the regulator's side of the story, and it is a real one. What follows is what the numbers say about the other side — the licences these sites actually hold, the terms built to delay a payout, and the handful of checks that separate a careful operator from a shell.
Table of Contents11
- Online Casino Not on GamStop and The Licences Behind the Label
- UK Online Casinos Not on GamStop and The Comparison That Matters
- How Identity Verification Causes Delays
- Five Signs an Offshore Casino Can Be Taken Seriously
- How to Check an Offshore Casino Before Depositing
- Where the Regulator Stands, and How It Is Going
- What the LCCP Actually Requires of a British Licence
- What "Best" Means in an Unregulated Market
- The Market Outside the Register, by the Numbers
- Questions About Casinos Outside GamStop
- The Scheme These Sites Are Built Around
Online Casino Not on GamStop and The Licences Behind the Label
Take a site that advertises itself as accepting British players while sitting outside the Commission's register, and look for the licence at the bottom of the page. In my experience it is one of four, and they are not equivalent.
Curaçao
The Curaçao Gaming Authority has been rebuilding its regime since the National Ordinance on Games of Chance took effect on 24 December 2024, replacing the old master-licence model. The legacy "orange" sub-licence certificates of operation ended on 15 October 2025, and a historic /JAZ number is expressly not proof of a current licence. Application for a B2C licence costs a one-time EUR 4,592; the total annual fee is EUR 47,450. Only a Certificate of Operation Seal, issued for an approved domain, should link through to cert.cga.cw — and if the certificate behind it names a different domain, the site is displaying someone else's paperwork.
Anjouan
Internet gaming here is regulated under the laws of the Autonomous Island of Anjouan, founded on 2005 legislation. B2C licence issuance is EUR 17,828 one-time, with the same again annually. Anjouan Gaming says its licences carry no territorial restriction under Anjouan law, though holders must comply with the law wherever they operate — and in June 2026 it stated that an Anjouan licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world". Certificates carry a QR code linking to a public register. An ABC News investigation of 31 December 2025 reported claims of more than 1,300 licences issued at around EUR 17,000 a year, and Comorian officials describing the licensing body as operating illegally — a dispute I cannot settle here, which is itself the point about thin jurisdictions.
Kahnawà:ke
The Kahnawà:ke Gaming Commission has regulated interactive gaming since 1999, longer than almost anyone. Operators must be hosted at Mohawk Internet Technologies, and a Client Provider Authorization is what most casino brands actually hold rather than the single Interactive Gaming Licence. The Commission's Logo Certificate Program, running since January 2010, generates a Certificate of Good Standing when clicked. Fees rise on 1 January 2027: a CPA application goes from USD 35,000 to USD 40,000.
Malta and Costa Rica
Malta is the more substantial regulator — a EUR 5,000 application fee, a EUR 25,000 annual licence fee and 5 per cent tax on gaming revenue — but an MGA licence is not a British licence, and the MGA publishes a list of unauthorised URLs where its name has been used falsely. Costa Rica has no comprehensive gambling licensing regime at all; the "data processing license" sometimes cited in the trade is not a licence in the legal sense, and a bill to create a mandatory regime was rejected in early 2026.
UK Online Casinos Not on GamStop and The Comparison That Matters
What separates a tolerable offshore operator from a bad one is rarely the flag on the licence. It is the method it uses to handle money and paperwork, and those methods are comparable. The table below sets the British standard — the terms a Commission licensee must meet — against the practices typically found offshore.
| Method or term | British-licensed standard | Typical offshore practice |
|---|---|---|
| Self-exclusion | Blocked via GamStop for 6 months, 1 year, 5 years or 5 years auto-renewing; checked at least every 24 hours | GamStop does not apply; any internal exclusion is the operator's own and enforced by nobody |
| Wagering on bonus funds | Capped at 10 times since 19 January 2026 | Commonly 25x to 40x in the trade, with 35x–50x welcome offers and 40x–60x on no-deposit deals |
| Maximum cashout on bonus winnings | No maximum may be imposed on the deposit balance | Caps such as 300 per cent of the credited bonus, with the excess voided |
| Withdrawal friction | Cannot demand information at withdrawal that could reasonably have been requested earlier | Reverse withdrawals, one-request-at-a-time rules and staged document requests are common |
| Payment methods | Credit cards banned since 14 April 2020; e-wallet funds from cards must be screened | Crypto, prepaid and card routes without the British restrictions |
| Dispute route | Free access to an approved ADR provider after eight weeks; IBAS and eCOGRA handle most cases | Whatever the licence requires; Anjouan, for one, mandates a named ADR provider |
| Insolvency protection | Customer funds disclosed in writing with a "not protected", "medium" or "high" rating | Rarely stated in those terms; funds may sit in an overseas account |
Two rows deserve a second look. Reverse withdrawals were permanently banned in Britain by RTS 14B on 31 October 2021 — "Consumers must not be given the option to cancel their withdrawal request" — because the Commission found the function tempted vulnerable players to keep going. Offshore, that ban does not exist, and a withdrawal you can cancel is a withdrawal you can lose. The second is the cashout cap: a 300 per cent ceiling on bonus winnings sounds generous until it bites on the one session that would have paid for a car.
How Identity Verification Causes Delays
If there is one thing this whole corner of the market turns on, it is verification — and specifically the difference between verifying an identity early and verifying it at the moment the money wants to leave.
With a British-licensed casino, the Commission's Licence Condition 17 requires identity to be established before a customer is permitted to gamble, and the May 2019 rule was tightened by a 2026 expectation that checks be brought forward to before a deposit or stake. In the anti-money-laundering regulations the trigger figure for remote casinos is deposits or withdrawals reaching €2,000, single or linked, and the "hybrid approach" lets a remote casino verify age at registration and defer full verification to that threshold. That is how it works the first time. Later, checks are ongoing: they can be repeated when circumstances change, and for higher-risk accounts source of wealth gets established too.
Offshore, the sequence is often reversed. Nothing is asked at registration, deposits are accepted without a murmur, and the documents request arrives when a withdrawal is pending — passport, selfie, proof of address, sometimes a bank statement going back months. The Commission's own figures show what that pattern costs consumers even inside the regulated market: over a quarter of complaints reaching its Contact Centre concern identity verification, a concern typically raised when documents are demanded only on withdrawal. LCCP condition 17.1.1 exists precisely because of it, barring an operator from requiring information at withdrawal that it could reasonably have requested earlier.
The warning signs are easy to read once the order is clear. A site that wants nothing but an email address to take a deposit and then wants a notarised utility bill to release one is using verification as a brake, not a gate. A site with no published terms on which documents it accepts, and no statement of how long a withdrawal takes, has told you something. And a site that answers a withdrawal request with a fresh bonus offer is not solving your problem; it is lengthening the queue.
Five Signs an Offshore Casino Can Be Taken Seriously
Judging one of these sites is not a matter of taste. Each of the signs below can be checked in minutes, and a site that fails three of them is not worth the effort.
A licence you can verify on the regulator's own register
Click through the seal or licence certificate and see whether it lands on the regulator's own domain with the site's exact domain name printed on it. A Curaçao Certificate of Operation Seal must resolve to cert.cga.cw, and a certificate naming a different domain is someone else's. A /JAZ number from the old Curaçao sub-licence era has been dead since 15 October 2025. Anjouan certificates carry a QR code pointing at a public register. If the only proof is a graphic with no working link, that is the answer.
Terms that state the wagering figure and the cashout cap in plain numbers
The multiple and the maximum withdrawal should be visible on one page, not spread across a bonus appendix. In the regulated market the Commission capped wagering at 10 times from 19 January 2026, having noted some licensees previously applied up to 60 times. Offshore, 25x to 40x is common and no-deposit offers run higher. A site that names its multiplier and its cap is not necessarily generous; it is at least legible, and legible terms are the ones that get honoured.
A withdrawal process with a published timescale and no cancel button
Look for a stated processing time, a named payment method that suits you, and an absence of any option to reverse the withdrawal back into the balance. In the Commission's data covering June to September 2024, 96.3 per cent of 44.2 million withdrawals by customers of large online operators cleared automatically. A site that cannot tell you whether its withdrawals take hours or days, or that offers to put the money back in play, has kept the friction that Britain threw out in 2021.
A complaints route with an actual third party named
There should be a named ADR provider, the site should say how long it takes, and the provider should appear on the regulator's own approved list. In Britain, licensees must offer free ADR after eight weeks; eCOGRA recorded 911 disputes in the year to 30 September 2025, resolving domestic cases in an average of 31 days and ruling for the consumer in 17.8 per cent of them. I would not read 17.8 per cent as a scandal; I would read it as evidence that the process is real. A terms page that reserves every decision to the operator resolves nothing.
Customer funds that are described, not hinted at
Check the terms for a sentence about what happens to a balance if the operator fails. British licensees must disclose one of three ratings — "not protected", "medium" or "high" — in writing and get an acknowledgement. A separate client bank account does not mean players get their money back on insolvency, and holding funds overseas is permitted. The honest offshore operators say which category they are in. The others write about "bank-level security" and hope nobody reads the next clause.
How to Check an Offshore Casino Before Depositing
There is no safe way to gamble outside the British system — only a more or less reckless one. What follows is ordinary diligence, not a recommendation.
- Check the regulator's register, not the site's badge. Find the licence number and confirm it against the authority's own list or certificate link, then check the domain on the certificate matches the site's. Reason: badges are copied and old Curaçao numbers are still displayed long after they expired.
- Read the withdrawal section before the bonus section. Note the stated processing time, the fee, and whether a maximum cashout or a one-withdrawal-at-a-time rule appears. Reason: the money you can take out matters more than the money they advertise.
- Run the terms through one question — who decides? If a clause gives the operator sole discretion to void winnings, close an account or confiscate funds, that clause will be used. Reason: in Britain such terms have been found unfair under the Consumer Rights Act 2015, and offshore they are simply the deal.
- Test the support desk with a factual question. Ask how long a withdrawal takes and which documents are required, and see whether the answer is specific. Reason: the quality of the answer before a dispute predicts the quality of the response during one.
- Install blocking software and use the bank-level blocks as well. Gamban and BetBlocker are signposted by GamStop itself; BetBlocker states it blocks over 1,368,000 gambling websites and 3,100 apps, and bank gambling blocks are offered by Bank of Scotland, Barclays, Halifax, HSBC, Lloyds, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling. Reason: protection you have arranged in advance is the only kind that survives a bad night.
- Set a financial limit on day one, whatever the site offers. From 31 October 2025 British licensees must prompt for a financial limit before the first deposit; offshore, nothing prompts you. Reason: the deposit limit you would have chosen sober is the one that holds when you are not.
If gambling is causing harm, the National Gambling Helpline is free on 0808 8020 133, 24 hours a day. Callers in Wales can use 0808 2819 265.
Where the Regulator Stands, and How It Is Going
The Commission's case against these sites is not rhetorical. Its Illegal Markets team has issued 3,140 cease and desist notices since April 2024, made 774 registrar referrals, 402 host referrals and 3 payment provider referrals, and referred 447,778 Bing and Google URLs, securing 287,961 removals. Engagement across 160 illegal sites fell 32 per cent on average. By method, registrar blocks and suspensions were the most effective at 91 per cent each, ahead of GEO IP blocking at 60 per cent, Bing removal at 52 per cent, Google removal at 30 per cent and Facebook removal at 8 per cent — which is the Commission's own argument that making a site hard to find is not the same as making it hard to reach.
The scale is contested, and the contest matters. The Commission's November 2026 analysis put engagement with illegal gambling websites at 2.5 per cent among people who had gambled online in the past four weeks. H2 Gambling Capital estimates £16.6 billion staked with illegal operators in 2025, against about £5 billion in 2019, with the legal share falling from 97 per cent to 92 per cent. A Frontier Economics study for the Betting and Gaming Council put online black-market stakes at £2.7 billion, 2.1 per cent of regulated remote stakes. Yield Sec put the unregulated share at 9 per cent of an £8.8 billion market. Four methodologies, four different answers — a spread that should make anyone suspicious of a confident figure, including mine.
One number is not in dispute. In the quarter to September 2026 the Commission referred 1,835 websites to search engines and issued 546 cease and desist notices, and across April 2025 to March 2026 it commenced one prosecution in total. Disruption is cheap; prosecution is rare. That is the honest shape of enforcement, and it explains why the sector keeps regenerating: an illegal site is a nuisance to be blocked, not, in practice, a business to be put on trial.
What the LCCP Actually Requires of a British Licence
It is worth stating what the standard is, since it is the only benchmark that can be checked against a primary source. Since 31 March 2020, every online operator must participate in GamStop as a condition of its Commission licence — the requirement sits in the LCCP's social responsibility code provision 3.5.5, which states plainly that "Licensees must participate in the national multi-operator self-exclusion scheme". From April 2020 operators must check their entire customer base against the register at least every 24 hours, which also stops registered people receiving direct marketing. Two operators lost their licences in April 2020 for missing the integration deadline, under section 118(2) of the Gambling Act 2005.
The consequences of that condition are practical, not decorative. GamStop registrations run for 6 months, 1 year, 5 years, or 5 years with auto-renewal; a block can take up to 24 hours to take effect. Once registered, the exclusion cannot be cancelled during its term, and it stays in place after the chosen period ends until the person contacts Gamstop to remove it. A five-year auto-renewing exclusion may only have its renewal switched off in the final six months, and absent any action Gamstop holds the data through a further automatic seven-year period during which operators are told the person was previously excluded. Registrations cannot be removed early — the Group's 2025 annual report gives a whole section to its refusal to do so.
That is why the Commission issued an industry warning notice on 20 January 2025 about licensed operators' casino games appearing on unlicensed sites, noting that such sites often target customers who have self-excluded and may have weak social responsibility and anti-money-laundering controls. An offshore site is never a route around a self-exclusion. It is the place the exclusion was designed to intercept, and the one place where nothing intercepts it.
What "Best" Means in an Unregulated Market
The phrase is searchable, so it exists, and I am not going to pretend it doesn't. But the honest answer is that "best" in this niche means the operator that delays least, states most, and is worst at hiding. There is no ranking worth trusting here, because nobody outside the Commission's remit publishes data that would support one. The British market's figures come from a regulated dataset covering roughly 70 per cent of online gambling, with published withdrawal statistics, complaint categories and ADR outcomes. Offshore, you get a terms page and a marketing department.
What a careful assessment can compare is method. Withdrawal friction: British licensees may not demand information at withdrawal that they could reasonably have requested earlier, and reverse withdrawals are banned outright. Bonus arithmetic: the 10-times wagering cap and the ban on mixed-product promotions took effect on 19 January 2026, having been moved back from 19 December 2025. Bonus structure: sticky bonuses, where the bonus itself can never be withdrawn, are a structure British rules effectively ended by requiring separate balances and free withdrawal of the deposit balance at any time. Those are the axes. A site that scores well on all three and holds a licence anyone can verify is the closest thing to "best" this market offers — and it is still outside every protection that matters.
The Market Outside the Register, by the Numbers
Some figures to hold next to each other. Total British gambling gross yield was £17.5 billion in the year to March 2026, up 4.4 per cent; remote casino, betting and bingo contributed £8.3 billion, up 6.9 per cent. Online slots alone took £773 million in the January to March 2026 quarter, from 25.1 billion spins. That is the market illegal operators are skimming.
GamStop, meanwhile, recorded 117,756 new registrations in 2025 and had 561,983 active exclusions at the end of the year. The first half of 2026 brought a 16 per cent year-on-year rise, with May 2026 setting a record 12,236 sign-ups, and by July 2026 the register stood at 614,738 people — more than half of whom had chosen the maximum five-year term, while only one in four across all age groups had picked six months. Under-25s accounted for nearly one in three of the first-half 2026 exclusions, up 26 per cent year on year.
Read together, those numbers say something uncomfortable about the pitch. The population most likely to be searching for a casino outside GamStop is the population that has been signing up to it in record numbers, and choosing the longest terms. The trade has noticed; the Commission's warning notice says so in writing. A casino that markets itself on being outside the scheme is not serving an underserved market. It is fishing in the one pool where a self-exclusion is meant to hold.
Questions About Casinos Outside GamStop
Are online casinos not on GamStop legal?
Offshore casinos holding no Gambling Commission licence are not licensed in Great Britain, and it is illegal under section 33 of the Gambling Act 2005 for anyone to provide gambling facilities without a licence, with the offence attaching to the operator rather than the player. The Commission states plainly that offering commercial gambling services to British consumers without a Commission licence is illegal even where the operator holds a licence elsewhere. So the site is acting unlawfully in serving Britain, and sitting on one is not an offence for the person doing it.
What protections are lost when a casino is not on GamStop?
A great deal, and not only self-exclusion. The 10-times wagering cap, the ban on mixed-product promotions, the credit-card ban from April 2020, the prohibition on reverse withdrawals under RTS 14B, the rule that information cannot be demanded at withdrawal that could reasonably have been requested earlier, the requirement to disclose customer-funds protection in writing, and free access to an approved ADR provider after eight weeks all attach to a Commission licence and to nothing else. Outside it, the protection is whatever the operator's terms happen to say.
Can an offshore casino offer free spins with no deposit?
It can, and the terms are where the offer lives or dies. Free-spin and no-deposit bonuses typically carry their own wagering multiplier — 40x to 60x offshore — and a maximum cashout, often €50 to €100, with the excess voided. Some operators also bar consecutive no-deposit bonuses and strip winnings if two are redeemed in a row. In Britain, significant conditions for free bets and bonuses must be clear and the full terms no more than one click away; offshore, read the appendix or accept the odds.
How can I tell whether a casino is licensed in Great Britain?
Look for a Gambling Commission licence number and check it on the Commission's public register, then confirm the activities and domain names listed match the site you are on. The Commission advises exactly this before gambling anywhere. Its remit covers only sites trading or advertising to customers in Great Britain, and those must hold a Commission licence. A Maltese, Curaçao, Anjouan or Kahnawà:ke licence is a real licence in its own jurisdiction and not a British one; a Costa Rican "data processing license" is not a licence at all.
Why do offshore casinos hold up withdrawals?
Sometimes for anti-money-laundering reasons that are genuine, and often for commercial ones. The Commission has said it is not acceptable for operators to introduce friction at withdrawal rather than deposit, and that where there are no regulatory concerns there is no valid reason to delay a payout. In October 2026 a British-licensed group paid £900,000 in a regulatory settlement over terms allowing only one withdrawal request at a time and manual review of every fifth or tenth withdrawal. Offshore, that model has no regulator standing behind it.
Where can someone get help with gambling?
The National Gambling Helpline is free on 0808 8020 133, open 24 hours a day, and operated by GamCare; callers in Wales can use 0808 2819 265. Gamblers Anonymous England, Wales and Ulster runs around 250 meetings and can be reached on 0330 094 0322. Citizens Advice offers free, confidential help including debt advice, Citizens Advice Scotland runs a gambling support line on 0800 328 1131, and the NHS National Gambling Clinic accepts self-referrals.
The Scheme These Sites Are Built Around
Online casinos not on GamStop exist because GamStop works, and the figures show a scheme that people use in earnest rather than one they shrug past — 614,738 on the register by July 2026, most of them on the longest term available, and a 16 per cent rise in registrations in the first half of the year. An exclusion holds for its full term and then stays in place until the person contacts GamStop to remove it; it cannot be cancelled early, and a five-year auto-renewing term may only have its renewal switched off in the last six months. That is not a loophole waiting to be found. It is a wall with a stated height.
The regulator's answer to the sites built around that wall is disruption rather than prosecution: 1,835 websites referred to search engines in a single quarter to September 2026, and a single prosecution commenced across the twelve months to March 2026. The helpline, if it is needed, is 0808 8020 133, free and open every hour of the year.