An online casino not on GamStop is one holding no Gambling Commission licence, so it sits outside the national self-exclusion scheme. It cannot block a GamStop registration, and none of the protections attached to a British licence apply to the account: no staking limits, no statutory complaint route, and no guarantee the money comes back.
GamStop registers more people every year, and the growth is not slowing. In 2025 the scheme recorded 117,756 new registrations and ended the year with 561,983 active exclusions. By July 2026 that figure stood at 614,738, and more than one in two of those people had chosen the maximum five-year term. That is a large, determined population, and it is exactly the population the offshore market is built to serve. Trade talk calls it a gap in the market. I would call it a gap in the fence.
The angle of this site is limits: how much can go in, how much can come out, how fast, and who gets to move the goalposts afterwards. On that measure the British-licensed product has become visibly stricter — £5 a spin on slots for adults, £2 for the under-25s, a ten-times cap on wagering requirements, deposit limits presented as the default — and the offshore product has stayed exactly where it was. If someone wants a bigger stake and a faster withdrawal, an unlicensed site will sell it to them. What it will not sell them is recourse when the withdrawal stalls.
The awkward truth is that the illegal market is not, in truth, marginal. Gambling Commission analysis published on 5 November 2026 estimates that 2.5 per cent of people who had gambled online in the previous four weeks had engaged with an illegal gambling website, with a further 1.5 per cent doing so in the past year. H2 Gambling Capital puts the amount staked with illegal operators in the UK at £16.6 billion in 2025, and says the share of gambling happening legally slipped from 97 per cent in 2019 to 92 per cent in 2025. Every one of those bets was placed with nobody checking a licence, a stake cap or a self-exclusion register.
Table of Contents7
- Online Casinos Not on GamStop Arrangement Basics
- Comparing Regulated and Unregulated Casinos
- Online Casinos Not on GamStop Identity Checks
- Five Signs an Operator Can Be Trusted With Money
- How to Judge a Site Outside GamStop in Six Steps
- Questions About Online Casinos Not on GamStop
- The Limit Is the Licence
Online Casinos Not on GamStop Arrangement Basics
Online Casinos Not on GamStop 2026 Five Years of a Moving Target
It is often typed "gamestop", because the word game suggests itself, but the scheme's name is GamStop and it has been since April 2018. What changed most recently is the branding: in November 2025 it was renamed "Gamstop Online", and the betting-shop scheme formerly known as MOSES became "Gamstop Betting Shops". The substance is unchanged. Registering blocks a person from every online gambling company licensed in Great Britain, for six months, one year, five years, or five years with auto-renewal, and sign-up takes minutes while the block itself can take up to 24 hours to take effect.
The reason a market exists outside it is structural, not accidental. Since 31 March 2020 every online operator has had to join the scheme as a condition of its Gambling Commission licence, and since April 2020 operators must check their entire customer base against the register at least every 24 hours. That duty bites on licensed operators only. The Commission says plainly that an operator holding a licence in another jurisdiction still needs a Commission licence to offer commercial gambling services in Great Britain, and section 33 of the Gambling Act 2005 makes providing facilities for gambling without a licence an offence carrying up to 51 weeks' imprisonment, a fine, or both.
So the honest description of a UK online casino not on GamStop is this: it is offering a service it is not licensed to offer, to people in a country whose regulator is actively chasing it. The Commission's Illegal Markets team has issued 3,140 cease and desist and disruption notices since April 2024, referred 447,778 search-engine URLs, and secured 287,961 removals. It found an average 32 per cent fall in engagement across 160 illegal sites after disruption — a registrar block cut traffic by 91 per cent, a GEO IP block by 60 per cent, and a Google removal by only 30 per cent. That last figure is why telling people it is easy to find is not the same as telling them it is safe to use.
Where These Sites Are Licensed, and What That Licence Is Worth
The two-on-a-page mental model — Malta versus Curaçao — has gone stale. Curaçao rewrote its law: the National Ordinance on Games of Chance took effect on 24 December 2024, direct licensing by the Curaçao Gaming Authority replaced the old master-licence and sub-licence chain, and the legacy "orange" sub-licence certificates ended on 15 October 2025. A historical /JAZ number or an old seal is not proof of anything current. Curaçao's own announced application fee for a B2C licence is €4,592, with a total annual cost of €47,450, and the regulator has said its previous licensing portal will not return, which leaves verification of licensed domains in an awkward transitional state.
Anjouan is the cheaper end and the more troubling one. Its published fee is €17,828 for issuance and the same for annual renewal. An ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around €17,000 each per year, and that Comoros financial intelligence officials described the entity selling them as operating illegally; a former Comorian attorney-general called it "an illegal entity". The regulator itself said in June 2026 that an Anjouan licence is not a universal authorisation to operate anywhere. That is a candid answer and, read carefully, it is a warning: the licence does not travel.
Malta is a different animal — a B2C licence with a €5,000 application fee, a €25,000 annual licence fee and a 5 per cent gaming tax, plus €100,000 of paid-up capital for the main licence types. Malta also publishes a list of unauthorised URLs and says any claim of a Maltese licence on them is false. Kahnawà:ke has regulated interactive gaming since 1999 and publishes a Certificate of Good Standing from a logo click, though its client-provider fees rise sharply on 1 January 2027. And Costa Rica licenses nothing at all: the Legislative Assembly rejected Bill No. 25,057 in early 2026, and the "data processing licence" sometimes quoted in sales copy is not a licence in any legal sense.
Offshore sites are not licensed in Great Britain, their protections do not reach a UK player, and no licence from Valletta, Willemstad, Mutsamudu or Kahnawà:ke changes that.
The Limit Structure, by Market
This is where the two products visibly part company. Every figure below is a licence condition, a scheme rule or a published fee, not a sales claim.
| Criterion | British-licensed casino | Offshore casino outside GamStop |
|---|---|---|
| Self-exclusion | GamStop applies; operators must check their whole customer base at least every 24 hours | No connection to GamStop; the register has no effect on the account |
| Slot stake cap | £5 per game cycle, £2 for under-25s | No cap |
| Bonus wagering | Capped at 10 times under LCCP social responsibility code 5.1.1 | Commonly 25× to 40×, with no-deposit offers higher |
| Maximum withdrawal | Capped amounts prohibited; the deposit balance is withdrawable at any time | Cashout caps written into terms — one published cap is 300% of the bonus credited |
| Reverse withdrawal | Banned outright since 31 October 2021 (RTS 14B) | Often offered, which is the point of it |
| Credit cards | Banned for gambling since 14 April 2020 | Frequently accepted |
| Dispute route | Free access to an approved ADR provider | Whatever the terms say, often an offshore ADR in an unfamiliar language |
| Customer funds | Insolvency rating must be disclosed and acknowledged | Segregation claimed by some; no enforceable disclosure duty |
Read the third row and the fourth together. A ten-times wagering cap on a bonus is a materially different offer from a 40-times cap, and a site that also reserves the right to limit a cashout to 300 per cent of the bonus has built the delay and the disappointment into the paperwork before anyone deposits. The British rulebook has been moving in the opposite direction for years, and the £900,000 settlement agreed by an operator in October 2026 — part of it for unnecessarily delaying consumer withdrawals, including a term letting customers request only one withdrawal at a time — shows how seriously the regulator treats terms whose only purpose is to slow an exit.
Why the Licence Is the Whole Argument
Every practical difference between a UK casino and an unlicensed one traces back to a single line in the conditions. Beyond that line there is no mandated stake cap, no capped wagering, no complaints clock, no customer-funds disclosure, no obligation to check a self-exclusion register, and no regulator with the power to fine anyone on the player's behalf. The Commission cannot get money back for an individual — it is a regulator, not an ombudsman — and it cannot discipline an operator it does not license.
That is why a UK online casino not on GamStop should be understood as an operator outside the regulator's reach rather than as one that has cleverly avoided some paperwork. The Commission's own warning notice of 20 January 2025 flagged that games from licensed suppliers were appearing on unlicensed sites available to British consumers, and noted those sites often target people who have self-excluded through GamStop and may have weak social responsibility and anti-money-laundering controls. The targeting is not speculation. It is the business model.
Comparing Regulated and Unregulated Casinos
The usual comparison table sets one brand against another. The useful one compares methods of staying inside the rules, because that is the decision a person actually faces.
The regulated route is the baseline. A British-licensed site cannot take more than £5 a spin on slots, cannot impose a wagering requirement above ten times, cannot offer a bonus mixing casino and sports products in one incentive, and cannot give anyone the option to cancel a withdrawal. From 31 October 2025 it must also prompt for a financial limit before the first deposit and treat setting one as the default. These are restrictions, and they are designed to make certain losses impossible rather than merely unlikely.
The offshore route removes all of that at once, which is precisely its selling point and precisely the problem. An account opened on a Curaçao or Anjouan licence will typically take a credit card, take a crypto deposit, accept a £50 spin, and offer a reverse-withdrawal button beside the pending payout. It may also ask for identity documents only at withdrawal — the practice behind more than a quarter of the complaints reaching the Commission's contact centre, according to its August 2026 blog.
Then there are the measures that work alongside the licence rather than replacing it. A bank gambling block, available from Bank of Scotland, Barclays, Halifax, HSBC, Lloyds, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling, declines payments to gambling merchant codes; it sits at card level, so it must be switched on for each card, and most banks impose a 48-hour or 72-hour cooling-off period before gambling transactions go through again. Blocking software is the other layer: Gamban blocks licensed and unlicensed sites alike and is free in Wales, while in England and Scotland it now costs £4.99 a month or £29.99 a year following the end of TalkBanStop funding on 31 March 2026. BetBlocker is free worldwide, needs no registration, and states it blocks over 1,368,000 gambling websites and 3,100 apps.
And then there is the route that is not a workaround at all: a five-year GamStop registration, chosen by roughly one in five registrants in 2025, which holds for its full term and then stays in place until the person contacts GamStop to have it removed. No offshore site is a way round that, because no offshore site can lift it.
Online Casinos Not on GamStop Identity Checks
Strip away the design and the bonuses and what decides whether a withdrawal arrives is the identity check. Understanding its timing explains most of the misery in this market.
The first time, a regulated operator must verify who it is dealing with before that person is allowed to gamble — name, address and date of birth at minimum, under licence condition 17.1.1, which came in on 7 May 2019. Most checks are electronic: an account matched against credit reference agency and electoral roll data clears in seconds and asks for nothing. Documents are requested when automatic matching fails, typically a passport, a driving licence or a household bill.
Later, and this is the part that catches people, the anti-money-laundering regime sets a €2,000 threshold under the Money Laundering Regulations 2017 at which identification and verification are required, and it applies to linked transactions as well as single ones — a session's worth of deposits counts as one. Above that, an operator may need to establish source of funds, or source of wealth for higher-risk accounts. The Commission's 2026 risk assessment rates the remote casino sector as high risk for money laundering, unchanged from the previous year, and reports rising use of false documents, deepfake video and AI face swaps to defeat checks.
The warning sign is not being asked for documents. It is being asked for them for the first time at the moment of withdrawal. Condition 17.1.1 says a withdrawal request must not trigger a demand for information the licensee could reasonably have requested earlier, and the Commission has said a delay caused by insufficient identity verification can be a breach. A regulated site should be telling customers before the first deposit what documents might be needed, in what circumstances and in what form.
Offshore, none of that structure applies, and the timing is unconstrained. A Curaçao, Anjouan or Kahnawà:ke operator is not bound by condition 17.1.1, by the €2,000 trigger, or by the Commission's view that friction belongs at deposit rather than at withdrawal. Anjouan does require licensees to name an approved ADR provider in their terms and resolve complaints within 30 days before escalation, and Kahnawà:ke states that its own voluntary self-exclusion is permanent and irrevocable — but that is a self-exclusion offered by the operator, not the national register, and it is not the same promise.
Five Signs an Operator Can Be Trusted With Money
The Licence Is Real and Current
Check the regulator's register, not the badge on the homepage. A British licence is verifiable through the Commission's public register, and the activities and domain names on the entry should match the site in front of you. Offshore badges are worth checking too: a Curaçao Certificate of Operation Seal must redirect to cert.cga.cw, and if the certificate behind the logo names a different domain, it belongs to somebody else. Anjouan certificates carry a licence number and a QR code that should resolve in the public register. Quick check: click the seal and read the domain name on the certificate.
The Withdrawal Terms Name a Number Without a Trapdoor
Look for a stated processing time and a stated maximum, then look for the sentences near them. Terms giving the operator sole discretion to void winnings — "may" or "reserve the right" — are treated as unfair under the Consumer Rights Act 2015, and a maximum limit on withdrawing the deposit balance is prohibited in the UK. Cashout caps, one-site-at-a-time withdrawal rules and "every tenth withdrawal is reviewed manually" clauses are the traps; the Commission fined a licensed operator in October 2026 over exactly that pattern. Quick check: search the terms for "maximum withdrawal" and "reserve the right".
Customer Funds Are Rated and Disclosed
A regulated operator must state whether customer funds are protected if the business fails, using a three-step rating — not protected, medium protection, or high protection — and must get the customer to acknowledge it. An operator rated "not protected" must repeat the warning every six months with the value held. Quick check: find the insolvency rating in the terms. If there is no rating, that tells you the site is not regulated here.
There Is a Named, Free Dispute Route
Regulated operators must let a customer take an unresolved dispute to an approved ADR provider at no cost after eight weeks. The approved list includes CEDR, eCOGRA, IBAS, ProMediate, ADR Group, Pegasus ADR Service, Blexr and the Tattersalls Committee, and IBAS and eCOGRA handle most gambling disputes. The record is worth knowing: IBAS completed domestic disputes in 20 days on average in 2024-25 and reported 100 per cent operator compliance with decisions against them; eCOGRA resolved domestic disputes in 31 days on average over the year to 30 September 2025, and only 17.8 per cent of completed disputes went the consumer's way. Quick check: the name and the free-of-charge statement should be in the terms, not in an email.
The Bonus Terms Fit on a Screen
Since 19 January 2026 a British-licensed bonus cannot carry wagering above ten times, cannot mix products in one incentive, and must publish its significant conditions no more than one click away from the advert. Terms setting out prohibited play must list the types of play concerned rather than leaving it to the operator's discretion. Quick check: find the wagering multiple in the first click. If it reads 35× or 40×, the site is not licensed here, whatever the footer says.
How to Judge a Site Outside GamStop in Six Steps
- Confirm the licence and its scope on the regulator's register. The Gambling Commission's public register shows which activities and domains a licence covers, and a mismatch is the whole answer. Doing this first saves every later step, because a licence that does not cover casino play in Great Britain settles the question of what happens when a dispute arises.
- Read the withdrawal section of the terms before the deposit section. Processing times, maximum cashouts, one-withdrawal-at-a-time clauses and manual review thresholds all live there, and they are the terms most likely to be relied on later. Deposit pages are written to be read; withdrawal pages are written to be enforceable, which makes them the more informative read.
- Check the customer-funds rating and the complaints route in the same pass. The insolvency rating tells you what happens to a balance if the business fails, and the named ADR provider tells you where a dispute goes. An operator that publishes both has nothing to hide about either.
- Set the limits before the first spin, not after the first loss. Financial limits must be offered before a first deposit at a licensed operator, and settings on financial limits take effect only going forward — a reduction usually applies immediately, an increase after a cooling-off period. Choosing the number in advance is what makes it a limit rather than a note of regret.
- Layer a bank block or blocking software if the aim is to restrict access, not just stakes. A card-level gambling block covers online casinos, betting sites, gaming apps and physical venues and does not affect credit scores, while blocking software covers both licensed and unlicensed sites. These are the only tools on this page that follow a person to an offshore site, because they operate on the device and the card rather than on a licence.
- Use the help that exists, and use it early. The National Gambling Helpline, run by GamCare, is free on 0808 8020 133, 24 hours a day, every day, with the same number reaching live chat and WhatsApp; callers in Wales are given 0808 2819 265 alongside it. GamFam supports families through GRA5P, Gamblers Anonymous England, Wales and Ulster is on 0330 094 0322 with around 250 meeting locations, and NHS gambling clinics have been expanding since 2019. Contact is the step that changes the arithmetic, and it is available before anything has gone irreversibly wrong.
Questions About Online Casinos Not on GamStop
Is there such a thing as a new online casino not on GamStop?
Yes, and they appear constantly, because the barrier is a fee rather than an inspection regime. Anjouan charges €17,828 for issuance and the same again annually; Curaçao charges €4,592 to apply with €47,450 a year in total. A new domain can therefore be launched cheaply and pointed at British players. Nor is the branding accidental — a brand that is new to the market has no complaint history to search for, and that is the point of it.
Are best online casinos not on GamStop actually better than licensed ones?
On headline terms they look better: no £5 slot cap, no ten-times wagering ceiling, faster payments claimed, bonuses at 25× to 40× that a UK licence forbids above ten. Read the same terms for cashout caps — one published cap limits withdrawals from bonus winnings to 300 per cent of the bonus credited — and the advantage narrows quickly. Better at what, is the question worth asking before depositing.
What does an online casino not on GamStop free spins no deposit offer really cost?
Usually the most expensive promotion on the site, because nothing is staked to earn it and the conditions carry the weight instead. No-deposit bonuses commonly carry wagering of 40× to 60× with a cashout cap in the €50 to €100 region per comparison tables, and one operator's terms state that a deposit made while a no-deposit bonus is active does not clear it — the no-deposit wagering and cashout limits still apply to the whole balance. The condition converts a small gift into a trap on the deposited money.
Do UK online casinos not on GamStop report anything to GamStop?
No. The scheme's obligations attach to operators holding a Gambling Commission licence, so an unlicensed site has nothing to report and no way to act on a registration. That is what "not on GamStop" means in practice, and it cuts both ways: the registration cannot be circumvented, and it also cannot protect anyone who chooses to play where the register is not checked. A self-exclusion holds for its full term and then remains in place until the person contacts GamStop to remove it.
Can a site be licensed abroad and still take British players lawfully?
Not if it is offering commercial gambling services to consumers in Great Britain, which the Commission states requires a Commission licence — including where the operator already holds a licence elsewhere. Anjouan's own regulator said in June 2026 that its licence is not a universal authorisation and cannot exempt an operator from local law. An offshore licence is therefore not a passport; it is a home-country permission that stops at the border.
How much of the UK market is actually on unlicensed sites?
More than the industry likes to admit, and estimates vary by method. The Commission's analysis of 5 November 2026 puts engagement with illegal gambling websites at 2.5 per cent of those who had gambled online in the previous four weeks, with a further 1.5 per cent in the past year. H2 Gambling Capital estimates £16.6 billion staked with illegal operators in 2025, against roughly £5 billion in 2019, with the legal share of gambling falling from 97 per cent to 92 per cent.
The Limit Is the Licence
Online casinos not on GamStop are not an alternative to the British system with slightly looser paperwork; they are the same offer with the limits removed and the recourse removed along with them, and the evidence for that is written in their own terms rather than in anyone's opinion.
The stake cap, the ten-times wagering ceiling, the ban on reverse withdrawals, the required insolvency rating and the free ADR route are not decoration. They are the only parts of the arrangement that a player can point to when something goes wrong. The figure to hold on to is the Commission's own arithmetic: since April 2024 it has issued 3,140 cease and desist and disruption notices and removed 287,961 URLs, and it cannot return a penny of what is lost to the sites it is still chasing — a regulator, as it says itself, is not an ombudsman. Anyone who wants the help rather than the arithmetic can ring the National Gambling Helpline free on 0808 8020 133, at any hour, on any day of the year.