Online casinos not on GamStop are sites running without a Gambling Commission licence, so they sit outside the national self-exclusion scheme and outside British consumer protections. Their appeal is speed of access and looser bonus rules. The cost usually appears later: at withdrawal, in wagering terms, or in a payout that never arrives.
A site that is not on GamStop is simply a site that holds no Gambling Commission licence. That is the whole of it. There is no secret register of approved offshore operators, no grey zone of tolerated ones, and no reputable licensing authority that confers British consumer rights as a side effect. Section 33 of the Gambling Act 2005 makes it an offence to provide gambling facilities without a licence, and the Commission is blunt that this covers operators licensed elsewhere who take British customers.
Which is not the same as saying nobody plays there. The Commission's own analysis, published 5 November 2026, estimates that among people who had gambled online in the previous four weeks, 2.5 per cent had engaged with an illegal gambling site, with a further 1.5 per cent in the past twelve months. Small percentages of a large market are still hundreds of thousands of people, and the market intelligence firm H2 Gambling Capital puts the amount staked with illegal operators in the UK at £16.6 billion in 2025, up from about £5 billion in 2019.
I have covered this trade long enough to be tired of two opposite lies. The first says offshore means criminal. The second says offshore means free. Neither survives contact with a withdrawal request. What follows is what the rules actually say, what the numbers actually show, and where the money quietly goes missing.
Table of Contents10
- Meaning of the licence and the register
- UK-licensed sites set the bar; offshore sites are judged against it
- Comparing the routes players actually take
- The importance of identity checks
- Five signs an operator can be trusted
- A cautious checklist, in order
- Self-exclusion scope and limitations
- What an online casino not on GamStop really costs
- Frequently asked questions
- The bar is published, and offshore simply declines to clear it
Meaning of the licence and the register
GamStop is the UK's national online self-exclusion scheme, run by The National Online Self Exclusion Scheme Limited. It is free, and the name is very often typed "gamestop" — a slip the word "game" invites. Since 31 March 2020, every operator holding a Gambling Commission licence has had to participate in it as a condition of that licence, under social responsibility code provision 3.5.5. Operators were told in January 2020 that the deadline was coming.
So an online casino not on GamStop is, in almost every case, a site without a British licence. GamStop's own terms confirm the shape of it: the scheme can only exclude people from participating operators, and cannot prevent access to services run by organisations that do not participate. The Commission adds that its remit only reaches websites that trade or advertise to customers in Great Britain, and those must be licensed.
This is worth stating plainly because advertising works hard to blur it. A Curaçao seal, an Anjouan certificate, a Kahnawà:ke logo — these are real documents issued by real authorities, and none of them is a British licence. The Commission's public register is the only test that answers the question a British player is actually asking.
A checkable benchmark of 96.3 per cent
The cleanest figure in this whole subject comes from the Commission's own monitoring of large online operators between June and September 2024: 44.2 million withdrawals, of which 96.3 per cent cleared automatically, 3.5 per cent within 24 hours, and 0.1 per cent taking up to 48 hours.
That is the standard of comparison. Not because licensed operators are saints — the Commission's Annual Report and Accounts 2024-25 says withdrawal issues remain the single greatest source of complaints — but because their delays are measured, published and actionable. Complaints coded "Withdrawals and/or financial transactions" fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025. That is what a regulated market with a complaints route looks like: friction, counted.
UK-licensed sites set the bar; offshore sites are judged against it
The comparison is not between virtue and vice. It is between a market where terms can be challenged and one where they cannot.
British-licensed sites operate under licence conditions with teeth. Reverse withdrawals — the option to cancel a payout request and put the money back into play — were banned outright on 31 October 2021 by RTS requirement 14B. Wagering requirements are capped at ten times bonus funds from 19 January 2026 under Social Responsibility Code 5.1.1. No term may impose a maximum limit on what a customer can withdraw from their deposit balance. Un-staked deposits remain the customer's and cannot be confiscated for failing identity checks.
Offshore, none of that binds. Not one of those protections travels with the player. What does travel is the terms and conditions, which are drafted by the operator, interpreted by the operator, and enforced by the operator.
The good offshore operators are real, and I will not pretend otherwise. Some segregate player funds, use certified random number generators and publish dispute routes — Anjouan's published standards require fund segregation and approved testing, and it names EGIS ADR, Axion ADR, iGaming ADR and one licensee as approved alternative dispute resolution providers. Kahnawà:ke goes further, with a full-time Dispute Resolution Officer and a logo certificate programme that generates a Certificate of Good Standing.
The bad ones are also real, and they are the ones that advertise hardest. The Commission issued an industry warning notice on 20 January 2025 about casino games from licensed suppliers turning up on unlicensed sites available to British consumers, noting that such sites often target people who have self-excluded and may have inadequate controls.
The terms that build in delay
Delay rarely announces itself. It arrives as a clause.
The Commission announced on 21 October 2026 that an operator, which runs seven websites, would pay £900,000 in a regulatory settlement. The withdrawal-specific failures included a term letting customers request only one withdrawal at a time until the first was authorised — found unfair under the Consumer Rights Act 2015 — and manual review of every fifth or tenth withdrawal for some customers, which meant extra documents before anything was processed. That is a British-licensed firm, remember, with a regulator watching. Offshore, the same clause has no auditor.
The pattern is consistent: friction at the exit, never at the entrance. Deposits clear instantly. Payouts queue behind a document request, a maximum cashout clause, or a "manual review" that nobody has to justify.
Comparing the routes players actually take
The table below is by licence type, not by brand. Withdrawal speed means the operator's own processing, before a bank or wallet adds its own delay.
| Licence route | Typical withdrawal processing | Wagering cap on bonuses | Dispute route | Self-exclusion link |
|---|---|---|---|---|
| Gambling Commission (Great Britain) | 96.3% of 44.2m withdrawals cleared automatically, June–September 2024 | 10× maximum, from 19 January 2026 | ADR provider, free, after 8 weeks | GamStop, mandatory since 31 March 2020 |
| Malta (MGA) | Not published; operator-set | Not capped | MGA complaint form in English or Maltese | None for GB players |
| Curaçao (LOK) | Not published; operator-set | Not capped | Operator-selected | None for GB players |
| Anjouan | Not published; operator-set | Not capped | Approved ADR named, 30-day internal step first | None for GB players |
| Kahnawà:ke | Not published; operator-set | Not capped | Dispute Resolution Officer | Own scheme, described as permanent |
| No licence (Costa Rica) | Not published; operator-set | Not capped | None available | None |
Two things follow. First, only one row has a published, audited number for how fast money leaves — and it is the row that offshore advertising spends its time attacking. Second, the whole table can be read as a single column of blanks.
Curaçao is worth a note, since it is the most commonly cited licence. The National Ordinance on Games of Chance took effect on 24 December 2024, replacing the old master-licence model with direct licensing by the Curaçao Gaming Authority. Legacy "orange" sub-licence certificates ended on 15 October 2025. A historic /JAZ number must not be treated as proof of a current licence. On 7 October 2026 the CGA said its previous online portal would not return and it is working on an alternative way to verify licensed domains, because the old digital seal may be affected by the transition. A seal, in other words, is a claim, not a verification.
The importance of identity checks
Identity verification is where an offshore casino's real terms surface, because it is the one moment when the operator owes money and the player has no leverage. Get this section and the rest of the subject falls into place.
The British approach has been tightened deliberately. Licence condition 17.1.1 requires a licensee to obtain and verify a customer's identity before that customer is permitted to gamble, and the information must include name, address and date of birth. The Commission's August 2026 blog made its expectation explicit: checks should come before a deposit or a stake, not after a win, and onboarding on initials, nicknames or a company address is not good enough.
Underneath sits the anti-money-laundering regime in the Money Laundering Regulations 2017. In remote casinos, identification and verification are required when a customer deposits to take part in remote gambling, or withdraws funds or winnings, of €2,000 or more — and the threshold catches linked transactions, not just single ones. A remote casino may take the hybrid approach: verify age and identity at registration but defer full verification to that €2,000 trigger.
Offshore, the sequence is often reversed on purpose. Registration asks for an email. Deposit asks for nothing. The document request arrives when the balance is worth taking. A 2026 Commission blog reported that over a quarter of complaints reaching its Contact Centre concern identity verification, raised when documents are demanded only on withdrawal — and that this is one of the most common dispute types referred to ADR providers. The L & L Europe settlement included exactly this: manual reviews producing extra information requirements before withdrawals were processed.
The first-time experience and the later one differ. First withdrawal at a compliant British site is usually a database match — credit reference agency, electoral roll — and takes seconds. Later withdrawals are routine until a threshold or a pattern triggers a source-of-funds question. Offshore, first withdrawal is the gate: an unannounced demand, a deadline, and a term allowing the account to be closed for non-compliance.
Five warning signs of a licensed identity regime
- Checks arrive at the exit, never the entrance. The tell is a site that accepts a deposit in ninety seconds and then wants three documents to release £400.
- A clause lets the operator decide alone. Terms using "may" or "reserve the right" to void winnings are treated as unfair in Britain; offshore, they are the house style.
- Live chat cannot name the regulator. A regulated operator knows its licence number without looking it up.
- Fund segregation cannot be stated. Offshore standards require segregating player funds from operational money; in Britain, licence conditions 4.1.1 and 4.2.1 require a published insolvency rating.
- No named ADR provider. Where a dispute route is not in the terms, in writing, with contact details, there is no dispute route.
Five signs an operator can be trusted
Trust is not a feeling about a website. It is a set of documents that either exist or do not.
A regulator you can verify in thirty seconds
Go to the Gambling Commission's public register and click through to the entry. Check that the domain names listed match the site you are looking at. A licence displayed on a page proves nothing; a licence entry that names that page does. For Curaçao, the equivalent test is whether the Certificate of Operation Seal redirects to cert.cga.cw and shows the same domain as the site being accessed. If it shows another operator's domain, the seal is borrowed.
A published withdrawal period and a named payment route
The site should say how long it takes, in hours and days, and process deposits through a provider that is a payment service provider under the Payment Services Regulations 2017 — licence condition 5.1.2 has required that since 31 January 2024. A vague "up to 21 working days" is a term, not a delay, and the difference matters.
Bonus terms short enough to read on one screen
From 19 January 2026, British-licensed operators cannot set wagering above ten times on bonus funds or mix product types inside one incentive. If an offshore offer shows 40× with a €100 maximum cashout on a no-deposit bonus, nothing is broken — and nothing protects the player either. A cap on what can be withdrawn is the single most expensive clause in the industry.
Segregated funds and an honest insolvency rating
A British operator must publish whether customer funds are protected if the business fails, choosing between "not protected", "medium protection" and "high protection". One rated "not protected" must remind the customer every six months. A separate client account is not insurance: money in a client account can still be lost in an insolvency, and operators may hold it in overseas accounts.
A dispute route you can reach without spending money
British licensees must offer referral to a Commission-approved ADR provider free of charge if a complaint is not resolved within eight weeks; IBAS and eCOGRA have historically handled most gambling disputes. eCOGRA's report for 1 October 2024 to 30 September 2025 recorded an average of 31 days to resolve domestic disputes, with 17.8 per cent decided in the consumer's favour. That is not a triumph. It is a number, published, by a body that has to report it — which is more than most of the alternatives offer.
A cautious checklist, in order
Six steps. None of them requires a deposit, and the first three take ten minutes.
- Check the licence in the register, not on the homepage. Open the Gambling Commission's public register and search the trading name. Confirm the domain you are looking at appears. This is the only step that decides everything after it.
- Read the withdrawal clause before the bonus clause. Find the section on payouts and note the stated processing time, any maximum withdrawal limit, and whether the operator reserves discretion. A maximum withdrawal limit on deposit balance is prohibited in Britain and legal offshore; finding one tells you which regime you are in.
- Price the bonus properly. Multiply the wagering requirement by the bonus, then check which games contribute at what rate. A 40× requirement on a £100 bonus is £4,000 of play, and at a 5 per cent contribution on roulette the same bonus needs £80,000 of roulette stakes. The headline number is never the cost.
- Confirm the dispute route is written into the terms. Look for a named ADR provider with contact details, and for a stated deadline after which escalation is allowed. If the only route is a contact form on the operator's own site, there is no route.
- Check the fund protection statement and its date. It should appear before the first deposit and be acknowledged. If the operator claims funds are "fully protected", check that claim against the insolvency rating it must publish.
- Set the protections that work outside the site. Bank gambling blocks are offered by Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling, applied at card level, so each card needs activating. Blocking software such as Gamban and BetBlocker sits on the device. Neither cares which licence a site holds.
Self-exclusion scope and limitations
A GamStop exclusion runs for six months, one year, five years, or five years with auto-renewal. It takes only a few minutes to register, and up to 24 hours to become effective. Once registered, it cannot be cancelled or deactivated during the term, and it stays in place after the chosen period ends unless the person contacts GamStop to remove it. If nothing is done, GamStop holds the data through a further automatic seven-year self-exclusion period, during which operators are told the person was previously excluded.
That is the fact, and it does not have an offshore exception. An offshore site is not a way round a self-exclusion; it is a site outside the scheme that makes the exclusion, for that operator, meaningless. The Commission's January 2025 warning notice said as much about the traffic pattern.
The scale is worth holding in view. GamStop recorded 117,756 new registrations during 2025 and reported 561,983 active exclusions at 31 December 2025. Its July 2026 update put current registrants at 614,738, of whom more than one in two had chosen the maximum five-year term, while only one in four across all age groups had picked six months. Under-25s were nearly one in three of all first-half 2026 self-exclusions, up 26 per cent year on year — the group that offshore advertising reaches most easily and that the £2 slots stake limit for under-25s, live since 21 May 2025, was written to protect.
Land-based exclusion runs separately and is not interchangeable. SENSE covers licensed land-based casinos, with a minimum six months extendable to twelve; Gamstop Betting Shops, formerly MOSES, is telephone-based on 0800 294 2060 and fixes a twelve-month term that cannot be ended early. A Gambling Commission FOI response in May 2026 put active SENSE exclusions at 12,445 and M.O.S.E.S at 9,075 between April 2025 and April 2026.
What an online casino not on GamStop really costs
The visible cost of an offshore casino is the same as anywhere: the margin on the games. The invisible costs are four, and they compound.
The first is the bonus. Britain capped wagering at ten times from 19 January 2026, having explicitly rejected an outright ban and noted that some licensees had applied up to 60 times. Offshore multipliers commonly sit at 35× to 50× on welcome offers and 40× to 60× on no-deposit deals, often with a cashout cap — one operator limits bonus-derived withdrawals to 300 per cent of the credited bonus, voiding the excess. A waiting game against a time limit is a losing game too.
The second is the exit. Reverse withdrawals are banned in Britain, so a payout request cannot be quietly converted back into stakes. Offshore, that protection does not exist, and neither does the network of bank-side declines that follows the money instead of the site. The Commission's own disruption data shows why: registrar blocks and website suspensions cut engagement by an average of 91 per cent, GEO IP blocking by 60 per cent, while Google removals managed 30 per cent. The effective controls operate at the payment and hosting layers — not at the search results a player reads.
The third is time. Malta, Curaçao, Anjouan and Kahnawà:ke do not publish withdrawal processing times; British regulation does, and the number is 96.3 per cent automatic. Where no figure exists, no one is accountable for one.
The fourth is the absence of anything to appeal to. The Commission states plainly that it is a regulator, not an ombudsman: it cannot resolve individual complaints or help consumers get money back. Its powers run against operators and against the plumbing — 3,140 cease and desist and disruption notices since April 2024, 447,778 URLs referred to Google and Bing, 287,961 removals — and it began zero criminal investigations in April to June 2026 and one prosecution in the whole of April 2025 to March 2026. That is not indifference. It is the arithmetic of an enforcement model built to disrupt rather than to restore.
None of this is an argument that the British market is comfortable. The remote casino sector generated £5.0 billion of gross gambling yield in April 2024 to March 2025, £4.2 billion of it from slots, and the Commission rated the sector high risk for money laundering in its 2026 assessment. Two and a half per cent of online gamblers using an illegal site is not a rounding error at population scale.
It is an argument about where the risk sits. On a licensed site, the worst outcome is usually a frustrating week, a complaint to an ADR provider, and a number published the following year. Offshore, the worst outcome is a balance that exists in a database nobody outside the company can inspect. Both are a gamble. Only one is a gamble with a complaints procedure attached.
Frequently asked questions
Are online casinos not on GamStop legal?
No — not on the operator's side. Section 33 of the Gambling Act 2005 makes it an offence to provide gambling facilities without a licence, and the Commission states it covers operators holding a licence in another jurisdiction. The offence attaches to the provider, not the adult customer. That distinction matters legally, but it changes nothing about the outcome when a payout is refused.
Why do UK online casinos not on GamStop attract so much advertising?
Because they can buy the traffic that licensed operators cannot. British licensees face bonus caps, mandatory GamStop participation and advertising rules, while offshore affiliates compare welcome offers without those constraints. The Commission acts at the supply end instead — 3,140 cease and desist and disruption notices since April 2024 — and its October 2025 report found registrar blocks cut site engagement by an average of 91 per cent, far more than search removals at 30 per cent.
What does a bonus at a new online casino not on GamStop really cost?
Usually three to five times its face value in required play. Wagering of 40× on a £100 bonus means £4,000 of stakes, and contribution rates decide the real figure: at 5 per cent on roulette the same requirement needs £80,000 of roulette play. Add a maximum cashout clause — one operator voids anything above 300 per cent of the bonus — and the offer can be mathematically obsolete before it is claimed.
Can I self-exclude while still playing at an offshore casino?
A GamStop exclusion holds for its full term and remains in place after that term ends until the person contacts GamStop to remove it; if nothing is done, registration continues through a further automatic seven-year period. An offshore site is not an exception to that — it is a site outside the scheme, so the exclusion simply has no effect there. Blocking software and bank-level gambling blocks work regardless of licence.
How quickly do UK-licensed sites pay out compared with offshore ones?
The Commission's figures for June to September 2024 cover 44.2 million withdrawals, with 96.3 per cent cleared automatically, 3.5 per cent within 24 hours and 0.1 per cent up to 48 hours. Malta, Curaçao, Anjouan and Kahnawà:ke publish no equivalent processing time, so offshore speed is whatever the terms permit. British licensees must refer unresolved complaints to an approved ADR provider free of charge after eight weeks; offshore, the route is whatever the terms name.
What do I check before depositing anywhere?
Three things, in order. Search the Gambling Commission's public register for the trading name and confirm the domain appears — that single check sorts the market. Then read the payout clause before the bonus clause and look for a maximum withdrawal limit or an operator discretion term. Then confirm the terms name an ADR provider with contact details. If you have excluded, the free National Gambling Helpline is 0808 8020 133, day or night.
The bar is published, and offshore simply declines to clear it
An online casino not on GamStop is not a mysterious category with hidden advantages; it is a site that has opted out of the only regime in this country that publishes how fast it pays, caps what it can demand in wagering, forbids a maximum withdrawal on deposit balance, and gives a complainant somewhere free to go. The charm is liberty. The invoice is the absence of all four.
Which is why the most useful number in this entire subject remains the one nobody offshore prints: 96.3 per cent of 44.2 million withdrawals cleared automatically, June to September 2024. That is a benchmark, not a compliment — and the fact that it has to be published at all is the difference. In the year to December 2025 the Commission still logged 1,791 complaints coded to withdrawals and financial transactions, down from 2,416 three years earlier. Somewhere in that residue is a person who waited, and could at least say so out loud. Where the National Gambling Helpline is 0808 8020 133, a complaint has somewhere to land; where it is not, a complaint is just a closed chat window.