Casinos Without GamStop and Regulator Enforcement

Casinos without GamStop are gambling sites licensed outside Great Britain, usually in Curaçao, Anjouan or Kahnawà:ke, which are not connected to the UK's national self-exclusion scheme. They are not licensed in Great Britain, UK consumer protections do not apply to them, and the Gambling Commission cannot resolve a dispute over money held on one.

The phrase does a lot of unearned work. Search for it and you find two quite different objects wearing the same label: genuine offshore operators that hold some foreign licence and quietly accept British customers, and unlicensed sites that hold nothing at all and exist to harvest deposits. The Commission's Illegal Markets team has been busy with the second category — since April 2024 it has issued 3,140 cease and desist and disruption notices, referred 447,778 Bing and Google URLs and secured 287,961 removals. That is not a rounding error. It is an industry.

This page is about what those sites are, what paperwork they actually hold, what happens when something goes wrong, and — since the regulator's own output is the only reliable scoreboard here — how the Commission's enforcement record reads quarter by quarter. GamStop is the scheme's name; it is often typed "gamestop", and sites and forums sometimes use that spelling, but the scheme is GamStop and it is one scheme. What follows is not a recommendation to use anything. It is an account of how the market looks from the outside, and where the sharp edges are.

What a casino without GamStop actually is

A casino without GamStop is a site that accepts British players without being licensed by the Gambling Commission, so it never joined the national online self-exclusion scheme. Since 31 March 2020 all online operators licensed in Great Britain must be part of GamStop as a condition of their licence — the requirement sits in the LCCP at social responsibility code provision 3.5.5, which states that licensees must participate in the national multi-operator self-exclusion scheme. A site outside that regime is, by definition, outside the scheme.

The scheme itself is straightforward. Registering blocks a person from gambling with all online gambling companies licensed in Great Britain for 6 months, 1 year, 5 years or 5 years with auto-renewal, and it is free. Registration cannot be cancelled during the exclusion period, and the exclusion stays in place after the chosen period ends unless the person contacts GamStop to remove it. That last point matters: self-exclusion holds for its full term and then remains until the individual asks for it to be lifted. It is not a pause, and an offshore site is not a way round it.

The Gambling Commission's position on offshore operators is unusually blunt for a regulator: it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence, and that includes an operator holding a licence in another jurisdiction. Section 33 of the Gambling Act 2005 makes providing facilities for gambling without an operating licence an offence, carrying on summary conviction up to 51 weeks' imprisonment, a fine at level 5, or both. The offence attaches to the operator, not to the adult customer. That distinction is real, and it is also thin comfort when a withdrawal is stuck.

The Gambling Commission is also not an ombudsman. It cannot resolve an individual complaint or get anyone's money back; it records complaints and generally refers disputes to an independent third party.

Which licences turn up, and what they are worth

Curaçao

Curaçao rebuilt its regime recently. The National Ordinance on Games of Chance took effect on 24 December 2024, making the Curaçao Gaming Authority the direct licensing and supervisory authority and replacing the old master-licence and sub-licence model — the four former master licensors stopped issuing from dates between August 2024 and January 2025, and the legacy "orange" sub-licence certificates ended on 15 October 2025. Operators holding a valid licence when the law came in received a six-month provisional licence, extended by a further six months to 24 December 2025.

The paperwork is verifiable, which is more than can be said for most of the market. A Certificate of Operation Seal must redirect to the authority's certificate domain, and it is issued only for an approved, registered player-facing domain. If the certificate behind the seal names a different website from the one being viewed, that certificate belongs to somebody else. Fee levels are public too: a one-time non-refundable EUR 4,592 application fee and a total annual B2C fee of EUR 47,450.

Anjouan

Anjouan, part of the Union of the Comoros, licenses internet gaming under legislation adopted in 2005, with the Anjouan Offshore Financial Authority named as the competent regulator and Anjouan Licensing Services Inc. as sole authorised licence administrator. Published fees are EUR 17,828 for issuance and the same again for annual renewal, plus EUR 500 per additional domain.

Anjouan says its licences carry no territorial restrictions under its own law, but that holders must comply with the law wherever they operate — and in a statement on 10 June 2026 it said plainly that an Anjouan licence is not and never has been presented as a universal authorisation to operate in every country. It also maintains a verification framework: certificates carry a unique licence number and a QR code linking to a public register. Separately, an ABC News investigation published on 31 December 2025 reported that Comoros financial intelligence officials described Anjouan Corporate Services as operating illegally, and reported claims that more than 1,300 gambling licences had been issued at around EUR 17,000 each. The regulator disputes the characterisation; the reporting stands.

Kahnawà:ke

The Kahnawà:ke Gaming Commission was established in 1996 and enacted its interactive gaming regulations on 8 July 1999, and licensed operators must be hosted at a data centre in the Mohawk Territory of Kahnawà:ke. It issues one Interactive Gaming Licence at a time, held by the data centre operator since 1999, plus Client Provider Authorizations to the businesses players actually meet. Its Logo Certificate Program generates a Certificate of Good Standing when clicked, so at least the claim is testable. Fees rise on 1 January 2027: a CPA application from USD 35,000 to USD 40,000, and the five-year renewal from USD 5,000 plus the annual fee to USD 40,000 including it. The annual CPA fee stays at USD 20,000.

Malta and the rest

Malta is the interesting middle case. An MGA B2C licence costs a one-time EUR 5,000 application fee, a fixed annual licence fee of EUR 25,000 and 5% gaming tax, with minimum share capital of EUR 100,000 for the main B2C types — a serious supervisory regime, but still not a GB licence, so still not GamStop-connected. And then there is Costa Rica, which operates no comprehensive gambling licensing regime at all; the "data processing licence" sometimes cited is not a licence in any legal sense, and a bill that would have created a real regime was rejected in early 2026.

What the licence costs, and what that says

A licence fee is not a measure of protection, but it does separate the plausible from the disposable, and the pattern is worth seeing in one place.

Two readings. The first is that the annual cost of a Curaçao B2C licence, EUR 47,450, is not trivial, so the "no licence at all" category is a distinct and worse thing than the "foreign licence" category. The second is that the Gambling Commission's statutory levy raised just under £120 million in its first year, ringfenced for research, prevention and treatment — money that the offshore sector does not contribute, whatever else it pays for.

The Role of Identity Verification

If one thing separates an offshore account that behaves like an online casino without GamStop should and one that behaves like a trap, it is when the identity check happens. Everything else follows from it.

In Great Britain the direction of travel is clear. Licence Condition 17 requires licensees to obtain and verify information establishing a customer's identity before that customer is permitted to gamble, and the Commission expects identity and age checks to be brought forward to before a deposit, saying that onboarding on incomplete or inaccurate information — initials instead of full names, nicknames, commercial addresses instead of residential ones — is not sufficient. It has also warned about "fuzzy matching" through third-party verification providers. Under the money-laundering rules, a remote casino can identify and verify age at registration and defer full verification until deposits or withdrawals reach €2,000, the so-called hybrid approach; the anti-money-laundering threshold applies to a single transaction or to linked transactions, and linked includes activity within one logged-on period.

The first time is normally painless. A new account at a well-run operator is created in minutes, the name and address and date of birth are checked against databases such as the electoral roll or a credit reference agency, and no documents are needed — the Commission says that where a business can verify electronically the process may be instant, and that documents such as passports, driving licences and household bills may be requested where it cannot.

The second time is where it goes wrong. Verification deferred at sign-up has a habit of returning at the moment of cash-out, when the operator has the money and the player has none of the leverage. That pattern is visible in the numbers: more than a quarter of complaints reaching the Commission's Contact Centre concern identity verification, and it is one of the most common dispute types referred to alternative dispute resolution providers. Licence condition 17.1.1 requires that a withdrawal request must not trigger a demand for information the licensee could reasonably have requested earlier — but it carves out information the operator must obtain at that point under another legal obligation, such as anti-money-laundering rules. On a foreign-licensed site there is no condition 17.1.1 at all.

The warning signs are specific rather than vague: an account opened with nothing beyond an email address; verification only mentioned in small print or nowhere; a request for documents arriving after a win rather than before a deposit; a request for documents that no British operator would ask for; and a support desk that answers questions about limits promptly but questions about payout timing vaguely. Any one of those is a reason to stop and read the terms properly before adding more money — not afterwards.

Five signs an operator can be trusted

None of these signs makes an offshore site safe. They are filters for the ones that are at least what they claim to be.

The licence verifies on the regulator's own register

A real licence can be checked in under a minute. Curaçao issues a Certificate of Operation Seal only for an approved domain, and clicking it must redirect to the authority's certificate page; if the certificate names a different domain, the site is displaying somebody else's paperwork. Anjouan certificates carry a unique licence number and a QR code linking to a public register, and the authority's own published position is that a certificate that cannot be verified through the register should not be relied on as evidence of licensing status. Kahnawà:ke's logo generates a Certificate of Good Standing on click. The Gambling Commission advises consumers to click through to its public register and check whether the site's activities and domain names actually match the licence. Offshore, a historic number or a legacy seal proves nothing: Curaçao's older orange certificates expired on 15 October 2025.

The terms name a dispute route with a real address

A licensed operator has to give a dispute somewhere to go. Anjouan requires licensees to designate an approved alternative dispute resolution provider and to publish its name and contact details in player-facing terms, expecting complaints to be resolved within 30 days before escalation; the providers it currently approves are EGIS ADR, Axion ADR, iGaming ADR and an independent resolution firm. Malta asks players to lodge complaints through a form it reviews in English or Maltese. Kahnawà:ke employs a full-time Dispute Resolution Officer. Check for a named provider with a verifiable website — a support email address ending in the operator's own domain is not a dispute route.

The banking terms are stated plainly, without a limit to withdraw

The terms should say how customer funds are held, what happens to them if the operator fails, and whether there is any cap on what can be taken out. In Britain an operator may not impose a maximum limit on what a consumer may withdraw from their deposit balance, and un-staked deposits remain the customer's — the Commission's example of a prohibited term is "you may withdraw up to £50 per day and up to £500 per week". Offshore, check the cash-out clauses with particular care: some operators reserve the right to limit withdrawal from winnings generated with bonus funds to a multiple of the bonus, voiding the excess. Read the clause before depositing, because it will not be renegotiated afterwards.

The bonus terms fit on a page and the maths is checkable

From 19 January 2026, licensees in Great Britain must not apply wagering requirements over a maximum of ten times, and must not mix more than one type of gambling product within an incentive. Offshore, 25× to 50× is routine — one operator publishes 25× and states that the requirement applies to either the bonus or the bonus plus deposit, with a weighting chart giving slots 100%, table games 20%, video poker and blackjack 10%, roulette and baccarat 5% and live dealer 0%. That chart, not the headline multiple, determines what the requirement really costs. A 25× bonus on a game contributing zero can never be cleared.

The self-exclusion term is honest about what it covers

Kahnawà:ke's rules provide for voluntary self-exclusion that is permanent and irrevocable, and a player who breaches it forfeits funds deposited or won to a charity chosen by the Commission. That is a genuinely strict arrangement and worth knowing about. What no offshore scheme does is substitute for GamStop: the national scheme can only exclude a person from participating operators, and it is unable to prevent access to services run by organisations that do not participate. A site claiming its self-exclusion tool replaces GamStop has told you something useful about its marketing.

How to check a site before depositing

1. Verify the licence on the regulator's register, not on the site. Use the seal or QR code and confirm the domain matches. Reason: a copied certificate from another operator looks identical in a screenshot and fails instantly in the register.
2. Read the withdrawal section of the terms end to end, including the definitions. Look for cash-out caps, one-withdrawal-at-a-time clauses and maximum-bet-while-wagering rules. Reason: a term stating customers could request only one withdrawal at a time and could not request another until the first was authorised was found unfair under the Consumer Rights Act 2015 — a reminder that even licensed operators write these clauses, and unlicensed ones write worse.
3. Identify the dispute route and write it down. Confirm the named ADR provider exists and check whether it can hear the kind of dispute you might have. Reason: once money is held, a complaint with nowhere to go is just a message in a queue.
4. Note the payment methods and their own terms. E-wallet and crypto routes carry their own fees and delays — several e-wallets apply a service fee for accounts unused for six months, and crypto transfers carry their own confirmation times, with Bitcoin blocks averaging 10 minutes and six confirmations commonly required before funds are treated as settled. Reason: the money's journey does not end when the casino says "processed".
5. Set the account limits the site offers before the first deposit, and check your bank's gambling block. The Commission's list of banks with gambling blocking services includes Bank of Scotland, Barclays, Halifax, HSBC, Lloyds, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling; blocks are applied at card level, so each card needs switching on, and most banks use a 48- or 72-hour cooling-off period. Reason: a limit set calmly on a Tuesday holds on a Friday night.
6. Re-check the licence after three months. Regimes move: Curaçao's supplier licensing becomes fully mandatory and enforceable from 24 December 2026, and Kahnawà:ke suspended a Client Provider Authorization effective 29 September 2026. Reason: the licence a site had when the account was opened is not necessarily the licence it holds now.

If gambling is causing difficulty, help is free and does not depend on which site is involved. The National Gambling Helpline, run by GamCare, is on 0808 8020 133, 24 hours a day, and callers in Wales can use 0808 2819 265. GamStop itself is one part of that picture, not the whole of it, and blocking software is another: BetBlocker says it blocks over 1,368,000 gambling sites and 3,100 apps and requires no registration, while Gamban costs £4.99 a month or £29.99 a year in England and Scotland after its free UK licence scheme ended on 31 March 2026, and is free for residents of Wales. An offshore account is never a way round a self-exclusion that is in place. It holds for its full term, and then it stays until the person contacts GamStop to remove it.

What the regulator actually does about them

Here is where the site angle sits, and where the numbers are more interesting than the rhetoric. The Commission's Illegal Markets team has been running a disruption programme whose results it publishes, and the shape of those results is worth following because it tells you what the enforcement actually achieves.

Registration blocks and website suspensions produced the largest average fall in engagement — 91 per cent each — ahead of GEO IP blocking at 60 per cent, Bing removal at 52 per cent, Google removal at 30 per cent and Facebook removal at 8 per cent. Across 160 illegal gambling websites for which traffic data existed, the average decrease in engagement following disruption was 32 per cent. The Commission's own conclusion is that GEO IP blocking and registrar blocks work better than search-engine removals, because removing a site from search makes it harder to find without blocking access to it.

The volume has grown sharply. Websites referred to search engines rose from 124 in July to September 2024 to 321 in April to June 2025; cease and desist notices by quarter were 113, 83, 129 and 145 over the same four quarters, and search-engine removals were 123, 109, 170 and 214. Then the pace changed: in January to March 2026 the Commission referred 226 websites and issued 98 cease and desist notices; in April to June 2026 it referred 366 websites covering 147,721 URLs; and in July to September 2026 it referred 1,835 websites covering 7,677,211 URLs, with 546 cease and desist notices.

Note what is missing from that picture. Across April 2025 to March 2026, every quarter recorded 0 or 1 prosecutions commenced — one prosecution in the whole year, in October to December 2025. Disruption is an administrative exercise, not a criminal one, and it runs behind the market it is chasing: just over 1,000 unique illegal gambling websites were accessed by consumers in Great Britain over May 2024 to July 2025, and the Commission's estimate of time spent on illegal sites by British consumers was 306 million minutes in January 2025, 116 million in June 2025 and 152 million in July 2025.

There is an honest argument on the other side. The Commission's November 2026 analysis estimates that among people who gambled online in the past four weeks, 2.5 per cent had engaged with illegal gambling websites, with a further 1.5 per cent in the past 12 months — and 94.4 per cent of the whole population showed no indication of using one. That is small. It is also the population that most needs the protections that the licensed market enforces, which is why the Commission issued an industry warning notice on 20 January 2025 about casino games from licensed operators appearing on unlicensed sites, noting that such sites often target customers who have self-excluded via GamStop.

The market-size estimates do not agree with each other, and it is worth saying so. H2 Gambling Capital put stakes with illegal operators in the UK at £16.6 billion in 2025, up from about £5 billion in 2019, with legal share falling from 97 per cent to 92 per cent. A study by Frontier Economics for the Betting and Gaming Council estimated £2.7 billion staked annually online on the black market, 2.1 per cent of the £128 billion staked with GB-regulated remote casino, betting and bingo operators, rising to up to £4.3 billion including illegal in-person venues. Yield Sec's analysis for the Campaign for Fairer Gambling put the GB online market at £8.8 billion gross gaming revenue in 2025, split 91 per cent regulated and 9 per cent unregulated. The Gambling Commission's own October 2024 methodology combines web-traffic data with a licensed-play assumption of £0.32 gross gaming yield per minute for online slots and explicitly notes that it does not capture activity hidden by VPNs. Three researchers, three numbers, one uncertainty: nobody can see the whole of a market whose defining feature is not being registered anywhere.

The Illegal Gambling Taskforce's terms of reference, published by DCMS on 13 May 2026, set three priorities — reducing payments to and from illegal operators, tackling online advertising of illegal gambling, and improving cross-agency enforcement — and it runs for 12 months. Payments are the interesting one. The Commission made its first referral to the Visa Operator Scheme in January 2025 following a test purchase on an unlicensed site, and has since made three more, and describes payment transaction data as a critical and still early-stage part of its financial disruption strategy. A site that cannot take a card is a site that is much harder to run, which is probably the most consequential sentence in the Commission's entire enforcement report.

What the sector's own numbers say

The licensed market the offshore sector competes with is large and measurable. Total Great Britain gross gambling yield was £17.5 billion in the year April 2025 to March 2026, up 4.4 per cent, with the remote casino, betting and bingo sector at £8.3 billion, up 6.9 per cent. Online gross gambling yield for January to March 2026 was £1.55 billion, up 7 per cent year on year, with 26.8 billion bets and spins and 13.4 million average monthly active accounts. Online slots alone took £773 million in that quarter, up 12 per cent, on 25.1 billion spins.

That is where the offshore claim about "better odds and bigger bonuses" runs into a wall. The GB market takes more money, in public, and pays for a treatment system with a levy worth just under £120 million in its first year, split 50 per cent to treatment, 30 per cent to prevention and 20 per cent to research. A remote operator's levy rate is 1.1 per cent of previous-year gross gambling yield. Whatever an offshore licence costs — EUR 47,450 a year in Curaçao, EUR 17,828 in Anjouan — it does not buy a treatment place, a dispute route back to a British regulator, or an entry on a register that a British player can check.

Frequently Asked Questions

Are casinos without GamStop legal?

They are not licensed in Great Britain, and under section 33 of the Gambling Act 2005 it is an offence for a person to provide facilities for gambling without an operating licence. The Gambling Commission states plainly that offering commercial gambling to consumers in Great Britain without a Commission licence is illegal even where the operator holds a licence elsewhere. The offence attaches to the operator rather than the adult customer, but that is a statement about who is prosecuted, not about what protection exists.

Do casino sites without GamStop exclusion actually ignore GamStop?

Effectively, yes. GamStop works by requiring participating operators to check registrations and block the accounts, and participation is a licence condition for every operator licensed in Great Britain. A site with no GB licence is not a participating operator, so nothing passes its details to the scheme. GamStop's own terms say it blocks access to gambling websites and apps licensed in Great Britain only and cannot prevent access to services run by organisations that do not participate.

Why do online casinos without GamStop ask for so much paperwork?

Because money-laundering rules, not kindness, drive it. British operators must verify identity, and the €2,000 threshold governs when full checks are triggered in a remote casino; those checks can include source-of-funds evidence such as bank statements. The Commission's concern is timing: a check requested only when a player tries to withdraw is a licence breach, because condition 17.1.1 says a withdrawal must not trigger a demand for information the licensee could reasonably have sought earlier.

What happens if an offshore operator refuses to pay?

Very little, in practical terms. The Commission cannot resolve individual complaints or recover money, and it regulates only sites that trade or advertise to customers in Great Britain. If the operator names an approved ADR provider, that route is worth using and costs nothing. Otherwise the options are the operator's own complaints procedure, a foreign regulator that may have no consumer remit, or civil proceedings in a jurisdiction where the company is based — which is why the dispute route is worth checking before the first deposit, not after.

Can I use pay by phone bill casinos without GamStop?

Some offshore sites offer carrier billing, but it is a poor fit for the way these sites are licensed and supervised. In Great Britain, licence condition 5.1.2 requires licensees to accept payment from GB customers only by a method whose provider is a payment service provider within the Payment Services Regulations 2017, which carrier billing generally is not. Offshore, the absence of that rule cuts both ways: the deposit is easy and the withdrawal terms are whatever the operator's own contract says.

Are live dealer casinos without GamStop different?

Not in the way it matters. Live dealer tables are supplied by large game studios, and the Commission's January 2025 warning notice was precisely about casino games from licensed operators appearing on unlicensed websites — so the same games can sit on both sides of the line. What changes is not the table but the wrapper around it: who holds your funds, which regulator's rules apply to withdrawal terms, and whether an exclusion registered with GamStop reaches the account at all. It does not.

Casino websites without GamStop — how do the payment methods compare?

The payment rail is usually faster than the operator's own processing. Faster Payments completes over 90 per cent of transactions in under two seconds with a £1 million scheme ceiling, Visa Direct payouts can be available within 30 minutes of approval, and Bitcoin blocks average 10 minutes with six confirmations commonly required. MuchBetter states withdrawals may take a few hours to up to five business days depending on method, and several e-wallets charge a service fee once an account sits unused for six months. The delay that matters is almost always the operator's approval step, not the rail.

Understanding Offshore Gambling

Casinos without GamStop are sites outside the British licensing regime, and the entire apparatus that makes a licensed operator answerable — the licence condition forcing participation in self-exclusion, the fair-and-open terms rule, the identity-checking timing rule, the ADR route and the levy that funds treatment — stops at the border with them. The Gambling Commission's disruption figures show a regulator that can take a site out of search results and rarely takes anyone to court; its own finding that registrar blocks cut engagement by 91 per cent while search removals cut it by 30 per cent says the effective tools are the boring ones. The figure I keep coming back to is the one prosecution commenced in the year to March 2026, against 7,677,211 URLs referred in a single quarter. That ratio is the offshore market's real business model — not better odds, just a slower chase. And if a self-exclusion is in place, it holds for its full term and then stays until the person contacts GamStop to remove it; the National Gambling Helpline is on 0808 8020 133, 24 hours a day, and it does not ask which site you used.