Gambling Not on GamStop Sites Outside the Block

Gambling not on GamStop means gambling with an operator that holds no Great Britain licence, so it never joined the scheme. It is lawful for an adult to place the bet, unlawful for the company to offer it. UK protections vanish: no GamStop block, no eight-week complaints route, no Financial Ombudsman.

The phrase is often typed "gamestop", because the word "game" suggests itself. The scheme's name is GamStop, and the slip matters more than a spelling habit: it is the kind of small gap through which a whole trade of confusion runs. GamStop Online reported 614,738 consumers on the register in July 2026, and the block works precisely because every operator licensed here must obey it. A site that never took that licence has nothing to obey.

I have covered the gambling trade long enough to be tired of one particular sales pitch, which presents an offshore account as an escape hatch from a self-exclusion. It is not an escape hatch. A self-exclusion holds for its full term and then stays in place until the person contacts GamStop to remove it, and no site outside the British market alters that by a single day.

What the register does not do is close every door. The Gambling Commission's own numbers on enforcement are worth more than the marketing, and they are where this page starts. As of 13.11.2026, the picture is a regulator fighting a market that keeps reproducing itself, mostly with paperwork rather than prosecutions.

What Gambling Sites Not on GamStop Actually Are

Gambling sites not on GamStop are operators licensed somewhere other than Great Britain — Curaçao, Anjouan, Kahnawà:ke, Malta, or nowhere at all — that accept British customers without a Commission licence. That is the whole definition, and it explains everything that follows from it.

The legal baseline is blunt. Under section 33 of the Gambling Act 2005 it is an offence to provide facilities for gambling without an operating licence, and the offence attaches to whoever provides them, not to whoever uses them. The offence is immaterial as to whether the facilities are provided wholly or partly by remote communication, and whether they are provided inside or outside the UK. For remote gambling the section bites if at least one piece of remote gambling equipment sits in Great Britain, or if the provider knows or should know the facilities are likely to be used here.

The Commission says plainly that offering commercial gambling services to consumers in Great Britain without a Commission licence is illegal, "including where the operator holds a licence in another jurisdiction". It repeats that a licence elsewhere is no defence. So the market exists in a strange state: a British adult who opens an account with one of these sites commits no offence, while the company he opens it with commits one every day.

The Licence Gap for Gambling Sites Not on GamStop UK

Gambling sites not on GamStop UK customers reach are usually reachable because nothing physically stops them. There is no wall at the border of a website, only a question of whether the operator cares. The Commission's regulatory remit covers only gambling websites that trade or advertise to customers in Great Britain, and those must hold a Commission licence.

Look at what separates the two worlds and the difference is not a wish-list of features, it is a set of enforceable obligations.

• Licence condition 17.1.1 requires identity information — name, address, date of birth — verified before the customer gambles, and forbids springing a document request at withdrawal if it could reasonably have been asked earlier.
• Reverse withdrawals were permanently banned by RTS requirement 14B on 31 October 2021: customers must not be given the option to cancel a withdrawal request.
• Credit cards have been barred since 14 April 2020 under licence condition 6.1.2.
• Wagering requirements on bonus funds were capped at ten times from 19 January 2026, under Social Responsibility Code 5.1.1.
• Mixed-product promotions — a free bet and free spins in one offer — were banned on the same date.
• Self-exclusion: licence condition 3.5.5, in force since 31 March 2020, requires participation in the national multi-operator scheme, and since April 2020 operators must check their entire customer base against the register at least every 24 hours.

None of those rules travels with a Curaçao or Anjouan licence. That is not a matter of opinion; it is the definition of the licence gap.

What Offshore Sites Do Differently in Practice

Some offshore terms are merely strange. Some are designed to delay, and the delay is the product.

An offshore bonus can be set at 25× or more — Ignition Casino publishes a 25× playthrough requirement, and trade comparisons put offshore welcome offers typically between 25× and 40× — against a British ceiling of 10×. Offshore terms also carry maximum cashout clauses: one operator reserves the right to limit the withdrawable winnings from bonus funds to 300% of the credited bonus, with the excess voided. British rules forbid a maximum limit on withdrawing from a deposit balance outright, and the Commission's example of a prohibited term is "You may withdraw up to £50 per day and up to £500 per week".

Then there is the friction that arrives late, at the moment of withdrawal rather than the moment of deposit. The Commission has said it is not acceptable for operators to introduce friction when a customer tries to withdraw rather than when they deposit, and does not consider it fair, transparent or necessary to delay withdrawals purely for customer-interaction purposes. That statement binds licensed operators. Offshore, nobody is listening.

What the Regulator Actually Does About It

The regulator's answer to unlicensed sites has never been arrest. It is attrition, and the numbers show both its scale and its limits.

Since April 2024 the Commission's Illegal Markets team has issued 3,140 cease-and-desist and disruption notices — 2,032 cease-and-desist letters, 774 registrar referrals, 402 host referrals and 3 payments-provider referrals — while referring 447,778 Bing and Google URLs and securing 287,961 URL removals. Across 160 illegal gambling websites for which traffic data existed, engagement fell by an average of 32 per cent after disruption.

Its own assessment of which tools work is refreshingly honest. By disruption method, registrar blocks and website suspensions produced the largest average fall in engagement at 91 per cent each, ahead of GEO IP blocking at 60 per cent, Bing removal at 52 per cent, Google removal at 30 per cent and Facebook removal at 8 per cent. Search-engine removal makes a site harder to find; it does not block access.

The Numbers That Keep Moving

The enforcement pipeline swung hard in 2026. In the quarter to March 2026 the Commission referred 226 websites to search engines and issued 98 cease-and-desist notices. In April to June 2026 it referred 366 websites and 147,721 URLs and began 0 criminal investigations. In July to September 2026 it referred 1,835 websites and 7,677,211 URLs and issued 546 cease-and-desist notices.

Even so, across April 2025 to March 2026 every quarter recorded 0 or 1 prosecutions commenced — one, in October to December 2025. The enforcement is administrative, cheap and repeatable, which suits a regulator chasing thousands of domains.

The illegal market has not shrunk in step. Over May 2024 to July 2025, just over 1,000 unique illegal gambling websites were accessed by consumers in Great Britain. The Commission's own survey analysis published on 5 November 2026 estimates that among respondents who had gambled online in the past 4 weeks, 2.5 per cent had engaged with illegal gambling websites, with a further 1.5 per cent having done so in the past 12 months. Its illegal gambling dashboard recorded 586 sites accessible to GB consumers in September 2026, 4 per cent more than September 2025.

The Warning the Regulator Put in Writing

On 20 January 2025 the Commission issued an industry warning notice about casino games supplied by licensed operators turning up on unlicensed websites available to GB consumers. It noted that such sites often target customers who have self-excluded via GamStop, and may have inadequate social responsibility and anti-money-laundering controls.

That is the trade described by the regulator itself, in a single sentence. The unlicensed sector's most reliable customer acquisition channel is the self-exclusion register.

A separate case shows how market exits work. In May 2025 the Commission reported that TGP Europe was leaving the GB market following an investigation, that sites it operated were now unlicensed and may not provide protections against criminality or gambling-related harm, and that it had contacted five football clubs about sponsorship arrangements with unlicensed gambling businesses. A licence can end quietly, and the websites carry on with a different badge.

Where the Licence Comes From Matters

Judging an offshore licence means asking one question: who can remove it, and for what? Two regulators answer that question very differently.

Curaçao After the LOK

Curaçao replaced its old master-licence chainmail with direct licensing by the Curaçao Gaming Authority. The National Ordinance on Games of Chance took effect on 24 December 2024, and the old private master licensors can no longer grant Curaçao gaming licences. Licensing ceased for all four of them: Gaming Curaçao (365/JAZ) on 18 August 2024, Curaçao eGaming (1668/JAZ) on 1 October 2024, one master licensor (8048/JAZ) on 1 November 2024 and Curaçao Interactive Licensing (5536/JAZ) on 31 January 2025. The legacy "orange" sub-licence certificates ended on 15 October 2025.

The reform is real, and it is also unfinished. Provisional licences granted by operation of law on 24 December 2024 were extended twice, to 24 December 2025. On 7 October 2026 the CGA announced its previous online gaming portal would not return to service and that it is working on an alternative mechanism for verifying licensed domains, because the previous digital licence seal may be affected by the transition. Supplier licensing becomes fully mandatory on 24 December 2026.

Here is the money, and it is startlingly small next to what is at stake. A one-time, non-refundable application fee of EUR 4,592 for a B2C licence. A total annual fee of EUR 47,450 — EUR 24,490 to the National Treasury and EUR 22,960 to the CGA. An independent tracker reading the CGA register reported 704 licences held by 698 operators, of which 552 were active, in November 2026. That is not what a gate looks like. That is a turnstile with a card reader.

Anjouan, Where the Paper Is Cheapest

Anjouan, a constituent territory of the Union of the Comoros, licenses internet gaming under legislation from 2005. Issuance costs EUR 17,828 one-time and the same again on annual renewal, with EUR 500 per additional domain. Anjouan Gaming states that its licences contain no territorial restrictions under Anjouan law, and that holders must comply with all applicable laws in the jurisdictions in which they operate.

Its own words make the point for it. In a statement on 10 June 2026, Anjouan Gaming said: "An Anjouan Internet Gaming Licence is not, and has never been presented as, a universal authorisation to operate in every country in the world." No licensing authority can exempt an operator from local law where local authorisation is required.

The reporting around it is worse. An ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around EUR 17,000 each per year, that a former attorney-general of the Comoros described the entity as "an illegal entity", and that Comorian financial intelligence officials described Anjouan Corporate Services as operating illegally. Anjouan Gaming's own certificate framework says certificates carry a unique licence number and a QR code linking to a public register, and that certificates which cannot be verified there should not be relied upon as evidence of licensing status.

On the page, then, an unverifiable seal is not a regulator's seal.

Kahnawà:ke and Malta as Real Regulators

Kahnawà:ke has regulated interactive gaming since 1999 and runs a Logo Certificate Program, effective 15 January 2010, which generates a "Certificate of Good Standing" when a player clicks the Commission's logo. Its rules are specific and, in one respect, harsh: a player who breaches a self-exclusion prohibition forfeits any funds deposited or won to a third-party charity chosen by the Commission. Permit fees rise on 1 January 2027 — a Client Provider Authorization application from USD 35,000 to USD 40,000. On 6 October 2026 the Commission suspended the CPA held by Polar Ventures SDRL, which shows a small regulator can act when it chooses.

Malta is the most substantial of the offshore regimes: a B2C licence carries a one-time EUR 5,000 application fee, a fixed annual licence fee of EUR 25,000 and gaming tax of 5 per cent of revenue. The MGA also publishes a list of Unauthorised URLs, declaring it has no connection with those domains and that any reference to the MGA or a Maltese licence on them is false and misleading — most recently with notice dates of 30 October 2026. Even a well-funded regulator spends much of its time denying that it licensed people.

The Reality of Costa Rica Licences

Costa Rica operates no comprehensive gambling licensing regime and has no formal framework for issuing gambling licences. The "data processing license" sometimes cited in the trade is not a licence in the strict legal sense. A bill that would have introduced mandatory licensing, No. 25,057, was rejected by the Legislative Assembly in early 2026.

When a site's footer says Costa Rica and nothing else, the correct reading is not "lightly regulated". It is "unregulated, with a certificate of incorporation".

Compare Ten Casinos by Licence and Player Terms

Criteria, not brand names, are the only honest way to compare. The table below sets the British standard beside the offshore regimes this market actually uses. Every figure and rule in it comes from the sources named in the text around it.

One line deserves a second look: the ADR route. Licensed operators must let customers refer an unresolved dispute to an approved alternative dispute resolution provider free of charge after eight weeks, though the operator's own complaints procedure comes first. Disputes about account management and access to funds are within ADR's remit. Offshore, the ADR provider is chosen and named by the operator, and the Commission has no standing.

The Exclusion Term Is Where This Topic Turns

The single mechanism that holds this market together is the exclusion term, and it is worth understanding exactly, because most of what offshore sites sell is a claim about it.

How it works the first time. A person registers with GamStop, choosing six months, one year, five years or five years with auto-renewal. The scheme is free, sign-up takes a few minutes, and it can take up to 24 hours for the block to become effective. Registration cannot be cancelled or deactivated during the exclusion period. Not by the person, and not by an operator who would rather have the deposit.

How it works later. This is the part the marketing never mentions. When the chosen period ends, the exclusion stays in place unless the person contacts GamStop to remove it. Under the terms of use, auto-renewal can only be switched off during the last six months of a five-year minimum exclusion period, and it continues for up to four new five-year periods. If nobody deactivates it after the chosen term, GamStop holds the data through a further automatic seven-year self-exclusion period during which operators are told the person was previously excluded. The Group's 2025 annual report devotes a section to its refusal to remove registrations before the chosen term ends.

How operators meet it. Since 31 March 2020 participation has been a licence condition. Since April 2020 operators must check their entire customer base at least every 24 hours, which also stops registered people receiving direct marketing. The scheme's designers understood the obvious gap.

The warning signs offshore. Where the term is the product rather than the hurdle, three signs show up. A supposed self-exclusion that is a request to the operator's support desk rather than a register entry. A "cooling-off" that ends at a date the site itself sets. And a block that applies to deposits but not to the login. The Commission itself flagged the related problem in August 2026: onboarding a customer under a middle name instead of a forename can create mismatches with records held elsewhere, such as GamStop, undermining self-exclusion from the inside.

Self-exclusion is not a preference. It holds for its full term and then stays in place until the person contacts GamStop to remove it. The register is why the unlicensed sector advertises so heavily to excluded players, and it is the one fact that makes the whole comparison table above read differently.

Five Signs a Site Can Be Judged On

Trust here is not a mood. It is a short list of things that can be checked in minutes, and each sign below has a test.

The Licence Is Verifiable, Not Merely Displayed

A seal is a picture; a register entry is a record. The Commission advises checking that a business holds a British licence and clicking through to the public register to see whether the site's activities and domain names match. For Curaçao, clicking a Certificate of Operation Seal must redirect to the CGA's certification domain, the certificate behind it must name the domain being visited, and if the design, colour or format differs the website is not authorised. Anjouan's certificates carry a licence number and a QR code linking to a public register, and unverifiable certificates should not be relied on. Check: click the seal, then compare the domain on the certificate with the address in your browser bar.

A Named ADR Provider, With a Real Record

Being told to complain to the operator is not a dispute route. Licensed operators must offer an approved ADR provider free of charge after eight weeks, and the Commission's list includes ADR group, Pegasus ADR Service, an approved ADR provider, CEDR, eCOGRA, IBAS, ProMediate and Tattersalls Committee. The published records are real: eCOGRA received 911 disputes in the year to 30 September 2025, including 150 valid "Deposits & Withdrawals" disputes, with an average domestic resolution time of 31 days and 17.8 per cent of completed disputes ruled for the consumer. IBAS handled 3,721 domestic disputes in 2024-25, with an average completion time of 20 days. Anjouan requires licensees to name an approved ADR provider in player-facing terms. Check: search the terms page for the word "ADR" — if the only answer is a support email, there is no route.

The Bonus Terms Are Specific, and the Numbers Are Findable

Vagueness is a business model. A bonus whose significant conditions are one click from the offer is a bonus whose maths can be done; the Committee of Advertising Practice guidance published with the Commission says significant conditions for free bets and bonuses must be made clear, with full terms easily accessible. Look for the multiplier, whether it attaches to the bonus alone or to bonus plus deposit, the maximum cashout, the maximum bet while wagering, and the time limit. Check: find the wagering multiplier and the maximum cashout clause in under two minutes. If the answer is "contact support", treat the bonus as zero.

Withdrawals Are Documented Before the First Deposit

The clearest divide in this trade is where the friction sits. Licensed operators must tell customers before they deposit what identity documents or information may be needed, in what circumstances and in what form, and licence condition 17.1.1 forbids requiring extra information at withdrawal if it could reasonably have been requested earlier. Over a quarter of complaints reaching the Commission's contact centre concern identity verification, raised when documents are demanded only on attempting to withdraw — which is exactly the pattern the rule was written to kill. Check: read the withdrawal section of the terms and the account-opening requirements before depositing anything.

Protection and Complaint Notes Exist in Writing

Protection in insolvency is a disclosure, not a promise. Licence condition 4.2.1 requires operators to state clearly whether customer funds are protected in the event of insolvency, at what level and by what method, using the Commission's ratings of "not protected", "medium protection" or "high protection". A separate client bank account does not mean customers get their money back, and businesses are legally allowed to hold customer money in overseas bank accounts. Check: find the insolvency rating in the terms, then find the operator's registered address. The two together describe real risk better than any review.

Six Checks Anyone Can Run in an Evening

None of the following involves a trick, a workaround or anything unlawful. They are the ordinary diligence a careful person does before trusting a company with money.

1. Search the Commission's public register for the domain. The regulator says to check that a business holds a British licence and to click through to see whether the site's activities and domain names match. Why: the register is the only list where a licence means something enforceable here.
2. Read licence condition 17.1.1 in the light of the withdrawal section. Ask what documents will be required, when, and whether they could have been asked at sign-up. Why: late friction at withdrawal is the single most documented complaint type, and the rule against it applies only to British licensees.
3. Work out the bonus maths before accepting anything. Divide the multiplier against the maximum cashout and the maximum bet while wagering. Why: a 25× requirement with a 300% cashout cap can be worth less than a 10× requirement with no cap, and only arithmetic shows which.
4. Identify the ADR provider, then check what it has published. eCOGRA and IBAS both publish annual complaint statistics, including how often the consumer wins. Why: a dispute route with a public record is a route; a support email is a reply.
5. Find the customer-funds insolvency rating and the registered address. Why: the rating tells you the level of protection, and the jurisdiction tells you how far you would have to go to pursue a claim.
6. Check the help bodies are on hand before anything goes wrong. The National Gambling Helpline is operated by GamCare on 0808 8020 133, free, 24 hours a day, every day of the year. Why: the gap between a licensed site and an unlicensed one is exactly the gap between having somewhere to turn and having nowhere.

One more, for the avoidance of doubt: a self-exclusion holds for its full term and then stays in place until the person contacts GamStop to remove it. Nothing on this page weakens that, and no site outside the British market is a route around it.

An Honest Account of the Risk

The unlicensed market is not selling a better product. It is selling the absence of a rulebook, and the price is charged later, at the point of withdrawal, in the currency of paperwork.

The regulator will not rescue anyone from it. It is a regulator, not an ombudsman, so it cannot resolve individual gambling complaints or help consumers get their money back, though it records complaints and refers disputes to an independent third party. Its disruption work is genuinely effective where it lands — 91 per cent average falls in engagement from registrar blocks and website suspensions — and genuinely slow where it does not, given that a quarter to March 2026 produced 98 cease-and-desist notices while July to September 2026 produced 1,835 search-engine referrals and 7.7 million URLs. The one figure that matters most is the prosecution count across a whole year: one.

What is left is the practical view. A licence is not a badge on a footer; it is a dense set of obligations with a statutory levy attached, and the offshore version is thinner in every column of the table above.

If gambling has become a problem, the help is British, free and unqualified by any of this: GamCare's National Gambling Helpline on 0808 8020 133, day or night, and the National Gambling Clinic in London on 020 7381 7722 for treatment. Ringing either does not require a licence from anyone.

Questions About Gambling Not on GamStop

What gambling sites are not on GamStop?

Any operator holding no Gambling Commission licence, since the scheme binds only British licensees. That covers Curaçao, Anjouan, Kahnawà:ke, Malta and unlicensed operators, including some that were previously licensed here. The descriptive test is not the regime named in the footer but whether the site appears on the Commission's public register with matching activities and domain names.

Are gambling sites not on GamStop UK legal to use?

The split is awkward but real. The Gambling Act 2005's general offences attach to those who provide facilities, not to adult consumers, so placing a bet is not the offence — supplying it is. Section 33 makes it criminal to provide gambling facilities without a licence, and the section applies whether the facilities are provided wholly or partly by remote communication, inside or outside the UK.

Which UK gambling sites not on GamStop still pay out?

Payout speed offshore depends on the operator's own terms and the payment rail, not on a regulator's deadline. Bitcoin blocks average ten minutes and exchange-grade assurance usually wants six confirmations; Litecoin targets 2.5 minutes; USDT on TRON consumes about 65,000 Energy per transfer. The real question is terms, not chains: the Commission's fair-terms guidance forbids a maximum withdrawal limit on a deposit balance, and that rule stops at the British border.

Do gambling apps not on GamStop behave differently from the websites?

Usually not — the same account, terms and wallet sit behind both. The difference worth watching is where friction appears, because the Commission has said it is not acceptable for operators to introduce friction when a customer tries to withdraw rather than when they deposit. Offshore apps routinely verify identity first at the cashier, and the request arrives precisely when money is owed.

What does the regulator do about gambling companies not on GamStop?

It disrupts rather than prosecutes. Since April 2024 the Illegal Markets team has issued 3,140 cease-and-desist and disruption notices, referred 447,778 Bing and Google URLs and secured 287,961 removals, cutting engagement by an average of 32 per cent across 160 sites. Prosecutions are vanishingly rare: every quarter from April 2025 to March 2026 recorded 0 or 1 commenced.

Is there a Welsh gambling sites not on GamStop list worth trusting?

No such list exists in any official form, and its absence is the answer. GamStop operates UK-wide on the same register, and the National Gambling Helpline gives a Welsh number, 0808 2819 265, alongside 0808 8020 133 for England and Scotland. A "Welsh list" is a search phrase, not a source — anyone compiling it is ranking domains for traffic, not checking licences.

The Choice Is a Rulebook or Its Absence

Gambling not on GamStop is a market defined by subtraction, and the subtraction is measurable: a 10× wagering cap becomes 25× or more, a prohibited maximum withdrawal clause becomes a 300% cashout limit, an ADR provider with published statistics becomes a support email, and a mandatory register check every 24 hours becomes nothing at all.

I have no sympathy for the sites that market to excluded players, which is a trade the Commission named in writing, nor much for the argument that cheap offshore licensing is regulation because a fee was paid. EUR 17,828 a year buys a certificate, not an inspector.

The register exists because a betting shop, a bingo hall and a website cannot between them remember who asked to be left alone, and it does the remembering for them. A self-exclusion holds for its full term and then stays in place until the person contacts GamStop to remove it. Nothing offshore changes that, and the £120 million the statutory levy raised in its first year — ringfenced solely for research, prevention and treatment — was never paid by any of the sites this page describes.