Gambling Not on GamStop and Regulatory Enforcement

Gambling not on GamStop means playing with an operator that holds no Great Britain licence, so the national self-exclusion scheme has nothing to check against and UK protections — dispute routes, the 10x bonus cap, withdrawal rules — simply do not apply. The Gambling Commission counts hundreds of such sites and disrupts them continuously.

Every few weeks someone in the trade press writes the same sentence: the black market is booming, and the regulator cannot keep up. It is a good sentence. It is also a slightly lazy one, because the Commission now publishes the workings — how many sites it refers to search engines, how many cease and desist notices it posts, how much traffic falls away afterwards. That paperwork is more interesting than the slogan.

The awkward part of this subject is who gets counted. Most people who look for gambling not on GamStop are not hardened black-market customers; they are people who have hit a wall somewhere else and gone looking for a route past it. The Commission said as much in a warning notice in January 2025, noting that unlicensed sites frequently target people who have self-excluded via GamStop. That is not a market. That is a queue at a side door.

The scheme itself is worth stating plainly, because the name trips people up. It is GamStop, not "gamestop" — the misspelling is common enough that the scheme's own name has effectively been colonised by a video game retailer in search results. Registration blocks a person from gambling with every operator licensed in Great Britain, and it cannot be cancelled during the term chosen. When the term ends, it stays in place until the person contacts GamStop to have it removed. That last clause matters more than any other line on this page, because it is the one an offshore operator's marketing has no answer to.

Why Sites Outside GamStop Exist at All

The legal position is not ambiguous, however often it is muddled in forum posts. Section 33 of the Gambling Act 2005 makes it an offence for a person to provide facilities for gambling without an operating licence, and the Commission's own reading is blunt: it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where the operator holds a licence somewhere else. The offence is the operator's, not the player's.

Because that obligation is a licence condition, the scheme only catches licensed businesses. Social responsibility code provision 3.5.5 of the Licence Conditions and Codes of Practice requires licensees to participate in the national multi-operator self-exclusion scheme, and since 31 March 2020 that has meant every online operator. Offshore sites that hold no Commission licence sit outside it entirely, so a GamStop registration has no purchase on them at all — a point the Commission's own guidance makes, rather than an inference drawn by critics of the trade.

What fills the gap is a licensing industry happy to sell respectability. Curaçao's gaming authority issues B2C licences for a one-time application fee of EUR 4,592 and a total annual fee of EUR 47,450; Anjouan publishes EUR 17,828 for a B2C licence and the same again on renewal, with EUR 500 per extra domain. Kahnawà:ke charges a Client Provider Authorization application fee of USD 35,000, rising to USD 40,000 from 1 January 2027. These are real fees, and the regulators behind them do impose standards — Anjouan requires segregated player funds and certified random number generators. But none of them is the Gambling Commission, none of them answers to a British regulator, and none of them can compel an operator to honour another jurisdiction's self-exclusion register.

The [unconfirmed] part of the picture is the one most often quoted. Trade and press sources say offshore sites are not connected to GamStop; that is consistent with GamStop's own terms of use, and with the Commission's January 2025 notice describing how those sites target excluded players, but no primary regulator page states it in those words.

The Four Licence Families for Gambling Sites Not on GamStop

The useful comparison is not brand against brand — that is a shopping list, and this is not a shopping list. It is licence against licence, because the licence dictates what happens when something goes wrong and what happens to a deposit in between.

Two numbers in that table deserve a second look. The first is the Curaçao figure: EUR 47,450 a year is a real operating cost, and it buys real supervision — the Curaçao Gaming Authority replaced the old master-licence arrangement with direct licensing, cancelled the legacy "orange" certificates on 15 October 2025, and will make supplier registration mandatory from 24 December 2026. The second is the Kahnawà:ke figure, where the fee for a relatively small operation is larger than the annual revenue of some sites. A cheap licence is not automatically a hollow one, and an expensive one is not automatically a fair one.

What none of the four columns changes is the basic asymmetry: a British licence comes with an externally enforced complaints route and a regulator that can take a licence away. An offshore licence comes with whatever the licence's own terms provide, enforced by a regulator on the other side of the world. That is the whole argument, and no fee schedule makes it go away.

How the Regulator's Enforcement Numbers Actually Read

If the black market were as unpoliceable as the trade press suggests, the Commission's published totals would be thin. They are not. Since April 2024, the Illegal Markets team has issued 3,140 cease and desist and disruption notices — 2,032 cease and desist notices, 774 registrar referrals, 402 host referrals and 3 payment provider referrals. Over the same period it referred 447,778 Bing and Google URLs and secured 287,961 removals. Across 160 illegal gambling websites for which traffic data existed, engagement fell by an average of 32 per cent after disruption.

The method matters as much as the volume. Registrar blocks and website suspensions produced the largest average fall in engagement at 91 per cent each; GEO IP blocking produced 60 per cent; Bing removal 52 per cent; Google removal 30 per cent; Facebook removal 8 per cent. The Commission's own conclusion is that search-engine removal makes a site harder to find without fully blocking access, which is why payment and hosting interventions carry more weight than a de-indexing.

The pace is accelerating. In the quarter from July to September 2026 the Commission referred 1,835 websites — 7,677,211 URLs — and issued 546 cease and desist notices to illegal operators, with 311 sites disrupted in that quarter, 38 per cent more than the previous one, and 77 per cent of disrupted sites showing a reduction in estimated traffic.

One figure gives me pause. Across April 2025 to March 2026, every quarter recorded zero or one prosecutions commenced — one in total, in October to December 2025. Disruption is administrative, not criminal. That is a defensible strategy against fly-by-night operators, since a prosecution needs a defendant within reach, but it means the deterrent is a declining traffic graph rather than a courtroom.

Market Estimates for Gambling Sites

The honest answer is: fewer than the trade press implies, and more than is comfortable. The Commission's analysis published on 5 November 2026, covering April 2025 to April 2026, estimated that 0.6 per cent of all respondents — including non-gamblers — had engaged with an illegal gambling website in the past four weeks, with a further 0.4 per cent in the past 12 months, and 94.4 per cent showing no indication of using one at all. Among people who had gambled online in the past four weeks, the figure was 2.5 per cent, with another 1.5 per cent in the past year.

Now put that beside the market-intelligence estimate. H2 Gambling Capital puts the amount staked with illegal operators in the UK at £16.6 billion in 2025, up from about £5 billion in 2019, with the legal share of gambling falling from 97 per cent to 92 per cent. Another reading — Yield Sec's analysis for the Campaign for Fairer Gambling — puts the online market at £8.8 billion in gross gaming revenue in 2025, split 91 per cent regulated and 9 per cent not.

Those two sets of numbers cannot both be describing the same thing, and they are not. A share of stakes is not a share of players: stake figures are inflated by a small number of very active accounts and by bonus turnover, while player surveys are diluted by the large majority who never place a bet. The Commission's own dashboard offers the soberest middle ground — 586 illegal gambling websites accessible to GB consumers identified in September 2026, 4 per cent more than September 2025. Hundreds of sites, yes. A parallel industry the size of the regulated one, no.

Why Identity Checks Matter

If there is a single mechanism that divides a licensed site from an unlicensed one in daily practice, it is not the licence number in the footer. It is identity verification, and the reason it divides them is timing.

On a Gambling Commission-licensed site, the sequence is fixed by licence condition 17. Identification and verification — name, address, date of birth — must be established before the customer is allowed to gamble, and before the first deposit the site should tell customers what documents it might ask for. In practice, most checks run electronically against credit reference and electoral roll data and the customer never sees them. The Money Laundering Regulations 2017 then add a second layer: in a remote casino, identification and verification are required when deposits or withdrawals reach €2,000, counting linked transactions in a single logged-in session as one. The Commission's own expectation, restated in a blog in August 2026, is that age and identity checks are brought forward, not deferred.

The first time, then, is usually invisible and the second time is not. A player who deposits £30 a month may sail through for a year, then hit a request for a passport scan and a bank statement the moment they win something and try to take it out. That pattern is not only annoying; it is a licence breach. Condition 17.1.1 says a withdrawal request must not trigger a demand for additional information the licensee could reasonably have requested earlier. And LCCP guidance is explicit that operators cannot confiscate a deposit balance, or any part of it, on the grounds that the customer has failed identity or age verification.

Offshore, the timing is driven by the operator's own risk appetite rather than a licence condition, and the terms usually reserve more discretion. That discretion is the thing to read, not the licence seal. The warning signs are consistent across sites: documents requested for the first time at withdrawal and never at deposit; a term saying funds may be withheld pending verification; a maximum cashout clause such as 300 per cent of the bonus amount, which appears in some offshore terms; a general "at our sole discretion" right to void winnings. The Commission's fair-terms guidance says such discretionary terms are unfair within the meaning of the Consumer Rights Act 2015 on a licensed site. Offshore, they are simply a clause.

Five Signs an Offshore Site Can Be Taken Seriously

None of these signs makes an unlicensed operator safe, and none of them makes it licensed. They distinguish the operations that behave like businesses from the ones that behave like traps, which is a lower bar than it sounds.

The licence is verifiable on the regulator's own register, not just on the site

A seal in a footer is marketing until it clicks through. Curaçao's Certificate of Operation Seal must redirect to the authority's own certificate page, and if the domain shown on that certificate differs from the site being viewed, the certificate belongs to another operator. Anjouan certificates carry a licence number and a QR code linking to a public register. Kahnawà:ke runs a logo programme that generates a certificate of good standing. The check takes a minute — click the seal and compare the domain on the certificate with the address bar.

Player funds are held separately and the terms say so

Anjouan's published standards require operators to segregate player funds from operational funds. That is a real protection and a limited one: segregated funds are not insurance, and holding customer money in a separate account does not mean it comes back if the business fails. The check is a search of the terms for "segregated", "client account" or "funds protection", and then reading what the sentence actually promises.

Complaints go somewhere with a name

Anjouan requires licensees to designate an approved ADR provider — EGIS ADR, Axion ADR, iGaming ADR and another approved provider are the current list — and to publish its contact details in player-facing terms, with complaints expected to be resolved within 30 days before escalation. Kahnawà:ke employs a full-time Dispute Resolution Officer. A site whose terms route every dispute to an internal department, or to the operator's own jurisdiction with no named body, has told you what it thinks of disputes.

The bonus terms fit on a screen and the numbers are stated

An offshore welcome offer running at 35x or 50x wagering is not the same product as a British one, because from 19 January 2026 licensed operators cannot apply wagering requirements above ten times, and cannot bundle two or more gambling products into a single incentive. Offshore, there is no cap. The check is arithmetic: find the wagering figure, find the maximum cashout clause, find the maximum bet while wagering, and see whether the three of them together leave anything withdrawable.

The limits tools work, including a limit of zero

Kahnawà:ke rules require sites to let a player set limits including zero. A deposit limit that can be raised instantly, or removed by a live-chat request, is not a limit. The check is to set the lowest available figure and see whether the site raises it on request without a cooling-off period.

How to Check an Operator Before Depositing Anything

Six steps, in order. None of them requires an account, and none of them involves the site knowing who is looking.

1. Check the Gambling Commission's public register for the domain. The Commission advises consumers to check that a business holds a British licence and to click through to the public register to see whether the site's activities and domain names match. If the trading name is absent, the site is unlicensed in Great Britain — and the register is the answer, not the footer.
2. Read the licence certificate behind the seal, if it is offshore. Compare the domain on the certificate with the domain being viewed, and check the certificate's issue date. Curaçao's legacy "orange" sub-licences ended on 15 October 2025, so an orange seal presented as current proof is a red flag rather than a reassurance.
3. Search the terms for the withdrawal section and read it twice. Look for maximum withdrawal limits, a fixed processing window, fees, and any clause allowing funds to be withheld pending verification. On a licensed site, a term capping withdrawals from a deposit balance — the Commission's own example is "£50 per day and £500 per week" — is prohibited outright.
4. Find the dispute route and confirm the named body exists. On a licensed site, social responsibility code 6.1.1 requires a free referral to an approved ADR entity if a complaint is unresolved after eight weeks, and the Commission publishes the approved list: ADR Group, Pegasus ADR Service, Blexr, CEDR, eCOGRA, IBAS, ProMediate and Tattersalls Committee. Offshore, confirm the ADR provider named in the terms appears on the relevant regulator's own list.
5. Check the customer-funds disclosure before the first deposit. On a licensed operator, the terms must state clearly whether funds are protected on insolvency, at what level, and by what method, and the customer must acknowledge that disclosure before gambling with the balance. An offshore site with no such sentence has told you the answer.
6. Install a blocking tool if the point is to be blocked. GamStop signposts Gamban and BetBlocker. BetBlocker states it blocks over 1,368,000 gambling websites and 3,100 apps, requires no registration and is free worldwide. Gamban blocks licensed and unlicensed sites and after the end of TalkBanStop funding on 31 March 2026 costs £4.99 a month or £29.99 a year in England and Scotland, and is free for residents of Wales. A bank-level block is the other half: the Commission's list of banks offering one includes Barclays, HSBC, Lloyds, Monzo, NatWest, Santander and Starling, and most apply a 48-hour or 72-hour cooling-off before gambling payments resume.

Where the Regulator Draws the Line

Two facts sit under all of this, and both are worth putting in plain language once more. First, an offshore site is not licensed in Great Britain, so no UK protection attaches to it: the Commission's remit covers only websites that trade or advertise to customers in Great Britain under a Commission licence, and the Commission is a regulator rather than an ombudsman, so it cannot resolve an individual complaint or recover money. Second, self-exclusion through GamStop Online holds for its full term and then remains in place until the person contacts GamStop to have it removed. There is no early release, and the group's 2025 annual report devotes a section to its refusal to remove registrations before the chosen term ends. An offshore site is not a way round that; it is a way to be gambling without the protections that surround it.

Help is free and does not depend on which site someone was using. The National Gambling Helpline, run by GamCare, is on 0808 8020 133, 24 hours a day, every day of the year, with the same number reaching live chat and WhatsApp; callers in Wales can use 0808 2819 265. GambleAware, the public-facing brand of the charity GambleAware, directs people to the same helpline and its online chat. GamFam (charity number 1191139) supports family and friends through its GRA5P peer programme. Gamblers Anonymous England, Wales & Ulster is on 0330 094 0322. Citizens Advice Scotland runs a gambling support line on 0800 328 1131, Monday to Friday, 10am to 3pm. NHS England commissioned 15 specialist gambling clinics and 8 regional services receiving almost 5,000 referrals a year, funded by a statutory levy that raised just under £120 million in its first year.

Answers to Common Questions

What gambling sites are not on GamStop?

Any operator without a Gambling Commission licence is outside the scheme, because participation is a licence condition — social responsibility code 3.5.5, in force for all online operators since 31 March 2020. In practice that means sites licensed by Curaçao, Anjouan or Kahnawà:ke, plus a long tail holding no meaningful licence at all, such as operators claiming a Costa Rican "data processing licence", which is not a gambling licence in any legal sense.

Are gambling sites not on GamStop legal in the UK?

For the player, using one is not the offence — section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and the Commission's position is that it is illegal to offer commercial gambling services to consumers in Great Britain without a Commission licence. The practical consequence for the player is not a prosecution; it is the total absence of UK protections.

Do gambling apps not on GamStop work the same way?

Broadly, yes. The mobile app is a wrapper around the same offshore licence and the same terms, so the licence number in the app store listing is the thing to check. One difference is worth noting: app store rules vary by operator and product, so an app can be withdrawn in one market while the website remains open. The terms, not the app, are the contract.

Can an offshore site see a GamStop registration?

No. GamStop's register is checked by operators licensed in Great Britain, and the Commission's requirement that operators screen their entire customer base at least every 24 hours applies to those licensees. An offshore operation has no access to it. The Commission's January 2025 warning notice noted that unlicensed sites often target people who have self-excluded, which is the mechanism in reverse: not a check, but a customer base identified by its absence.

What happens to a withdrawal from an unlicensed site?

There is no published figure, no licence condition and no regulator to complain to, so the answer depends entirely on the operator's terms and its appetite for a dispute. On a licensed site, complaints coded "withdrawals and financial transactions" to the Commission's contact centre fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025; those disputes exist within a system that can settle them. Offshore, the equivalent number is zero because nothing is counting.

Are Welsh gambling sites not on GamStop different?

The licensing position is identical, because the Gambling Act 2005 and the Gambling Commission's remit cover Great Britain as a whole. The differences that matter are practical: the national helpline gives a separate number for callers in Wales, 0808 2819 265, and Gamban is free for residents of Wales while it costs £4.99 a month in England and Scotland after TalkBanStop funding ended on 31 March 2026.

The Numbers the Regulator Publishes Are the Argument

The black market in British gambling is real, measured, and smaller than the loudest estimates claim: 586 illegal sites identified in September 2026, a quarter of a million people at most among online gamblers in the past year, against a regulated market worth £8.3 billion in remote casino, betting and bingo gross gambling yield in the year to March 2026. The Commission's answer to it is administrative and increasingly effective — registrar blocks cutting engagement by an average of 91 per cent, 1,835 website referrals in a single quarter of 2026 — even as prosecutions stay at roughly zero.

So the honest reading is not that offshore operators are winning. It is that they are being managed rather than closed, and that the player who ends up on one is trading an enforceable set of rules for a set of promises. GamStop exists to break that trade at the point where it is most tempting. It blocks gambling with every British-licensed operator, it holds for its full term, and it stays in place afterwards until the person contacts GamStop to remove it — a design that only works because the sites that ignore it were never part of the scheme to begin with. The National Gambling Helpline is on 0808 8020 133, free, 24 hours a day.