Casino Apps That Pay Real Money, and the Ones the Regulator Is Chasing

Real-money casino apps pay out because a licensed operator is obliged to return a customer's deposit balance and winnings on request, with no reverse-withdrawal option and no cap on what may be withdrawn. Speed and certainty are not guaranteed by the app itself but by the licence behind it, and by whether the app is connected to GamStop.

The promise in the phrase is straightforward enough: an app on a phone that pays out money. What the phrase hides is that "pays real money" is a licensing question long before it is a design question, and that the apps most loudly promising instant riches are frequently ones the Gambling Commission would rather did not exist. Since April 2024 its Illegal Markets team has issued 3,140 cease and desist and disruption notices, referred 447,778 search-engine URLs and secured 287,961 removals — and a single prosecution commenced across the whole of April 2025 to March 2026. That is the shape of the argument: an enormous administrative effort, a persistent rump of sites, and a British player who, in practice, has to do a good deal of the checking themselves.

Worth saying at the outset, plainly, because the topic's marketing does not. An offshore app that holds no Gambling Commission licence is not licensed in Great Britain, and the protections that come with a British licence — the 10× wagering cap, the ban on reverse withdrawals, access to an approved alternative dispute resolution provider, and the customer-funds rules — do not apply to it. GamStop does not reach it either. GamStop Online blocks a person from online accounts with operators licensed in Great Britain only; self-exclusion holds for its full chosen term, and then stays in place until the person contacts GamStop to remove it. That is a fact, not a loophole to be shopped around. Anyone who needs help now can ring the National Gambling Helpline, operated by GamCare, free on 0808 8020 133, 24 hours a day, every day of the year — and it is worth repeating near the end of this piece.

What the Regulator Actually Emits

The site angle here is what a regulator does about unlicensed sites, so let us start with the numbers rather than the adjectives.

Since April 2024 the Commission's Illegal Markets team has issued 3,140 cease and desist and disruption notices: 2,032 cease and desist notices, 774 registrar referrals, 402 host referrals and 3 payment provider referrals. Over the same period it referred 447,778 Bing and Google URLs — 339,757 to Google, 108,031 to Bing — and secured 287,961 URL removals. Measured across 160 illegal gambling websites for which traffic data existed, engagement fell an average of 32 per cent afterwards.

The method matters more than the total, and the Commission is unusually candid about it. By disruption method, registrar blocks and website suspensions produced the largest average fall in engagement — 91 per cent each — ahead of GEO IP blocking at 60 per cent, Bing removal at 52 per cent, Google removal at 30 per cent and Facebook removal at 8 per cent. The Commission's own conclusion is that GEO IP blocking and registrar blocks outperform search-engine removals, because a search-engine removal makes a site harder to find without actually blocking access to it. That is a sentence worth rereading: the thing most visible in the press release is the least effective tool in the box.

Referrals have accelerated sharply. Websites referred to search engines rose from 124 in July to September 2024 to 321 in April to June 2025; cease and desist notices issued to illegal operators by quarter ran 113, 83, 129 and 145 over the same four quarters, with removals of 123, 109, 170 and 214. Then the pace broke: 226 websites referred and 98 notices in January to March 2026; 366 websites (147,721 URLs) in April to June 2026, with 0 criminal investigations commenced; and 1,835 websites (7,677,211 URLs) with 546 notices in July to September 2026. Across April 2025 to March 2026, every quarter recorded 0 or 1 prosecutions commenced — a total of one, in October to December 2025.

The market being policed is not small. Just over 1,000 unique illegal gambling websites were accessed by consumers in Great Britain over the monitored period from May 2024 to July 2025, and the number identified through the Commission's affiliate-page method rose from 364 in May 2024 to 535 in July 2025, once crypto-casino search terms were added to the methodology in December 2024. Time spent on illegal sites, as the Commission estimates it with a VPN adjustment, was 306 million minutes in January 2025, 116 million in June 2025 and 152 million in July 2025.

Those outside estimates are all over the place, and it is worth knowing why. Market-intelligence firm H2 Gambling Capital put stakes with illegal operators in the UK at £16.6 billion in 2025, up from about £5 billion in 2019, with the legal share of gambling falling from 97 per cent to 92 per cent. Frontier Economics, for the Betting and Gaming Council, conservatively estimated £2.7 billion staked annually online on the black market — 2.1 per cent of the £128 billion staked with GB-regulated remote casino, betting and bingo operators, involving 1.5 million Brits. Yield Sec/Gaming Compliance International, working for the Campaign for Fairer Gambling, put the GB online market at £8.8 billion gross gambling revenue in 2025, split 91 per cent regulated and 9 per cent unregulated. A 2020 PwC study for the BGC had the unlicensed share of online stakes at 2.3 per cent, up from 1.2 per cent in 2018/19.

£16.6 billion and £2.7 billion cannot both be right, and I would treat the biggest number with the most suspicion — it is the one that suits the case for deregulation. But the direction of travel is consistent, and the Commission's own published survey work keeps it honest: among respondents who had gambled online in the past four weeks, an estimated 2.5 per cent had engaged with an illegal gambling website, with a further 1.5 per cent in the past 12 months, while across the whole adult population 94.4 per cent showed no indication of using one at all. That is a real problem. It is not a revolution.

The Checkable Benchmark for Withdrawals From Large UK Operators

Here is the primary number I would put against every claim of instant payouts, and it comes from the Commission's own data, covering June to September 2024, cited in a speech delivered on 6 November 2025.

Over that period, customers of large online operators made 44.2 million withdrawals. Of those, 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours, and 0.1 per cent took up to 48 hours.

Read that again and the marketing language of "instant withdrawal casino apps" collapses into something more mundane. On the British-licensed side, the overwhelming majority of withdrawals are not a negotiation at all; they are processed. Earlier Commission data from some of the largest companies found those firms approved, processed and fulfilled around 99 per cent of customer withdrawal requests within 24 to 48 hours of the request.

Which makes the complaints interesting. The Commission's Contact Centre receives over 6,000 calls annually, and problems withdrawing from accounts have been the number one topic raised by consumers. By July 2024 the Commission said it was still receiving around 2,000 complaints a year about withdrawal delays — still the top subject. Its Annual Report and Accounts 2024-25 confirms that, despite work with some operators, withdrawal issues continue to cause most complaints received. Complaints coded "Withdrawals and/or financial transactions" fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025.

And consumer research published in July 2026 found only 49 per cent of people who had gambled in the past 12 months agreed that "it is quick and easy to withdraw and collect my winnings", with 33 per cent neutral and 18 per cent disagreeing. So: near-universal automatic processing, and half the population unimpressed. Both things are true, because the failures are concentrated rather than spread — and the failures are where a player's money actually sits.

How British-Licensed Apps Set the Standard

The comparison that shapes this whole topic is not app against app. It is licensed against unlicensed, and the terms that make British payout practice recognisable.

The Commission banned reverse withdrawals outright for all remote operators: RTS requirement 14B, "Consumers must not be given the option to cancel their withdrawal request", has been in force since 31 October 2021, following consultation. The regulator's reasoning was evidence that the reverse-withdrawal function presented a risk to engaged and vulnerable gamblers, including the temptation to continue gambling. Its implementation guidance adds that operators should make the process to withdraw funds as frictionless as possible.

On top of that sits licence condition 17.1.1, which requires that a customer's withdrawal request must not trigger a demand for additional information if the licensee could reasonably have requested that information earlier — while expressly preserving an operator's right to seek information it must obtain at that point under another legal obligation such as anti-money-laundering rules. Licence condition 7.1.1 requires terms to be fair within the meaning of the Consumer Rights Act 2015. Operators may not impose, use, enforce or seek to rely on any term setting a maximum limit on what a consumer may withdraw from their deposit balance; the Commission's own example of a prohibited term is "You may withdraw up to £50 per day and up to £500 per week". Un-staked deposits remain the customer's, and licensees must not have terms allowing confiscation of money deposited but not yet staked.

There is no fixed deadline in days for completing a withdrawal. The LCCP sets none; the regime rests on the fair-and-open condition, the identity-verification condition and the prohibition on unfair terms. I think that is the right call and I also think it is the reason withdrawal complaints persist — a standard without a deadline is only as good as the operator's willingness to meet it.

The Commission has been explicit about what it will not accept: friction on the way out rather than on the way in, placing the operator's commercial interests above the customer's, and delaying or preventing withdrawals purely for customer-interaction purposes. Where an operator has no regulatory concerns about a customer, the Commission says there is no valid reason to delay the payout. Operators should explain why a withdrawal has been delayed or refused, subject to the statutory prohibition on tipping off in money-laundering cases.

A £900,000 regulatory settlement announced on 21 October 2026 shows how the terms that build in delay get caught. An operator, which runs seven websites, paid it for failures including unnecessarily delaying consumer withdrawals: a term stating customers could request only one withdrawal at a time and could not request another until the original was authorised, found unfair under the Consumer Rights Act 2015, and manual review of every fifth or tenth withdrawal for some customers that led to extra information being required before withdrawals were processed. Neither term was illegal to write down. Both were fatal to the operator's case.

Payout Speed by Method, and Where the Delay Lives

Payment methods are not equal, and the argument about "instant" apps is really an argument about rails. None of these figures describes a casino's own processing; they are the network underneath it, which is where the last mile of a payout actually happens.

Two reflections on that table. First, the crypto rows are the ones sold as instant, and the honest reading is that they are fast on-chain and slow at the exchange — Bitcoin's 6-confirmation convention is not magic, it simply assumes an attacker with less than 10 per cent of network hashrate and accepts a residual double-spend risk below 0.1 per cent. Second, the e-wallet rows are where the quiet money goes: a fee of 2.80 per cent with a minimum of EUR 3.50 on a £50 withdrawal is not a rounding error, and a dormant account charged EUR 5.00 or USD 5.00 a month — Skrill and Neteller both apply that after six months of inactivity — turns an unused wallet into a slow leak. MiFinity is free for personal use but goes inactive after 12 months without login, at €1 per month. MuchBetter charges $5 a month after 12 months. These are not scandalous numbers. They are simply the numbers nobody quotes.

The rails themselves are governed, in Britain, by scheme ceilings rather than entitlements. The £1 million Faster Payments limit is a scheme maximum, not a promise to any individual: banks set lower per-payment limits, and the limit applies per transaction rather than per day, so a larger sum can be split across several payments.

Identity Checks That Payout Apps Turn On

If there is a single mechanism that decides whether an app "pays real money" for any given person, it is identity verification, and it is worth understanding properly because the industry's own statistics say it is where the friction concentrates.

Under licence condition 17, introduced on 7 May 2019, a licensee must obtain and verify information establishing a customer's identity before that customer is permitted to gamble. The information must include, but is not restricted to, name, address and date of birth. Account registration is where most people meet it: verification against databases such as credit reference agencies and the electoral roll often means no documents are needed at all, which is why the first account at a well-run British site frequently takes minutes and asks for nothing but a date of birth. That is how it works the first time.

The second time is different, and this is the part that catches people. Under anti-money-laundering rules, in remote casinos identification and verification are required when a customer deposits funds to take part in remote gambling, or withdraws such funds or winnings, amounting to €2,000 or more — and the threshold applies both to a single transaction and to transactions that appear to be linked. Transactions are linked if, for instance, they are carried out by the same customer through the same game or in one gaming session, or, in a remote casino, if they form part of the customer's overall activity during a single logged-on period. A player can therefore cross a threshold without any single deposit looking remarkable. Two thousand euros is roughly £1,700, and the crore of gamblers who never approach it will never see the process at all. Those who do, will.

A remote casino may also identify customers and verify their age at registration but defer full identity verification until the €2,000 threshold is triggered — the Commission calls this the "hybrid approach" — and the Commission expects identity and age checks to be brought forward to before a customer deposits or stakes, stating that onboarding on incomplete or inaccurate information, such as initials instead of full names, nicknames or commercial addresses instead of residential, is not sufficient.

The warning signs are specific and worth learning, because the rules exist to suppress exactly them:

• Documents demanded only at withdrawal. The classic complaint. Licence condition 17.1.1 says a withdrawal request must not result in a requirement for additional information if the licensee could reasonably have requested that information earlier — and the Commission has said that where a business delays a withdrawal because of insufficient identification, it may be in breach of licence condition 17. Today, over a quarter of complaints reaching the Commission's Contact Centre concern identity verification, and it is one of the most common dispute types referred to ADR providers.
• Onboarding on fuzzy matches. The Commission has expressed concern about operators using "fuzzy matching" via third-party verification providers and onboarding customers on partial or equivocal verification. A player onboarded as "J. Smith" can end up mismatched against records held elsewhere — including GamStop, which undermines the effectiveness of self-exclusion.
• Documents that drift from the account. Onboarding with a middle name instead of a forename creates mismatches downstream. If the name on the account does not match the name on the driving licence, expect a stall at the worst possible moment.
• No route to a decision. A site that cannot tell you why a withdrawal is held, or which has no dispute route, has told you something important. So has a site that refuses to accept that a customer's un-staked deposits remain their: the Commission's guidance is clear that licencees must not have terms allowing confiscation of money deposited but not yet staked, nor confiscate or deduct any part of a deposit balance on the basis that the consumer has failed identity or age verification.

The escalation path, once it exists, is well defined. LCCP social responsibility code 6.1.1 requires licensees to have arrangements for customers to refer any dispute to an ADR entity free of charge if it is not resolved to the customer's satisfaction within eight weeks of receipt of the complaint, and the customer must have gone through the operator's own complaints procedure first — the operator may issue a "deadlock letter" confirming they can go to ADR. Licence holders should allow complaints for at least six months from the date of the incident, acknowledge a complaint within 24 hours where they offer 24-hour gambling facilities, and complete the whole process, including internal escalation, within eight weeks. Licensees must not use terms restricting the customer's right to bring court proceedings.

The approved providers are ADR Group, Pegasus ADR Service, a dispute resolution service, the Centre for Effective Dispute Resolution (CEDR), eCOGRA, IBAS, ProMediate and Tattersalls Committee, and licensed operators may use only providers approved by the Commission. IBAS is the gambling specialist, free to consumers. eCOGRA is approved for all sectors, takes complaints in English free of charge, and may refuse a dispute where the site is not on its approved list, where at least two weeks have not passed since the problem began, or where the dispute arose more than a year ago. And the volumes are small relative to the market: eCOGRA recorded 911 disputes in the year to 30 September 2025, of which "Deposits & Withdrawals" accounted for 150 valid disputes, with an average domestic resolution time of 31 days and 17.8 per cent of completed disputes ruled in favour of the consumer. IBAS recorded 3,721 domestic disputes in 2024-25, 217 of them Banking/Financial, with an average completion time of 20 days and 100 per cent operator compliance with decisions in the consumer's favour in both 2023-24 and 2024-25.

A useful corrective: 361 of 499 invalid eCOGRA disputes — 72.3 per cent — had not been through the operator's internal complaint procedure first. Most people who lose a dispute at the door never actually filed one.

Five Signs an App Will Actually Pay Out

Each of these is checkable in a few minutes, and none requires anything other than patience.

The Licence Is on the Public Register, With the Right Domain

The Commission advises consumers to check before gambling that the business holds a British Gambling Commission licence and to click through to the public register to see whether the site's activities and domain names match. That last clause is the operative one. A licence covering a different domain is not a licence for the app in front of you.

Quick check: find the licence number in the app's footer, open the Commission's public register, and confirm operator name and domain name both appear.

The Terms State Where Your Money Sits if the Operator Fails

Customer funds held by a remote operator must be kept in a separate client bank account or accounts, separate from the operator's business accounts, and "customer funds" is defined in the LCCP as cleared funds deposited for future gambling, winnings or prizes left on deposit or not yet accounted for, and crystallised but unpaid loyalty or other bonuses. Gambling businesses must select one of three customer-funds protection ratings — "not protected", "medium protection" or "high protection" — must make clear in their terms which applies, and an operator rated "not protected" must remind the customer once every six months that their funds are not protected in the event of insolvency, stating the value of funds held.

Quick check: search the terms for "customer funds" and the rating word. If you cannot find it, that itself is the answer — and remember that a separate client account does not mean customers get their money back if the operator becomes insolvent, and that gambling businesses are legally allowed to hold customers' money in overseas bank accounts.

The Bonus Has a Wagering Figure You Can Read in Ten Seconds

Since 19 January 2026, LCCP Social Responsibility Code 5.1.1 bars licensees from applying wagering requirements over a maximum of 10 times, and from including more than one type of gambling product within an incentive. The Commission chose the cap over an outright ban, and said plainly that the limit "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements". Read the significant conditions, not the headline: LCCP SR code 5.1.9 requires all significant conditions applying to marketing incentives to be provided transparently and prominently, and where shown online to be displayed in full no further than one click away.

Quick check: find the wagering multiple and the maximum cashout clause, and time yourself. If it takes longer than a minute, the offer was not designed to be understood.

There Is a Named ADR Provider and a Complaints Route

A licence holder must let a customer refer an unresolved dispute to an ADR entity free of charge after eight weeks, and the Commission publishes the list of approved providers.

Quick check: search the terms and conditions for "ADR", "IBAS" or "eCOGRA" and a postal or email complaints address. Absence is not a technicality; it means the escalation route British licence conditions require has no obvious entrance.

The App Reaches GamStop

Since 31 March 2020 all online gambling operators must be part of GamStop as a condition of the licence granted to them by the Commission, a requirement sitting in LCCP social responsibility code provision 3.5.5 — "Licensees must participate in the national multi-operator self-exclusion scheme". In April 2020 the Commission added a requirement for operators to check their entire customer base for GamStop Online registration at least every 24 hours, which also prevented registered people receiving direct marketing.

Quick check: an app that is genuinely part of the scheme will say so, and the operational consequence of the 24-hour check is that a GamStop registration takes effect quickly at any participating operator. If an app markets itself on being outside the scheme, it has told you it is not licensed here.

Six Checks Before You Deposit Anything

1. Confirm the licence on the Commission's public register, matching domain to licence. Reason: the Commission's regulatory remit only allows it to regulate gambling websites which trade or advertise to customers in Great Britain, and those websites must hold a Commission licence. A site outside that circle has no regulator in this country at all.
2. Establish whether GamStop reaches the app. Reason: the scheme blocks a person from online accounts with operators licensed in Great Britain only, and can only exclude from participating operators. Self-exclusion holds for its full chosen term and then stays in place until the person contacts GamStop to remove it — an offshore site is not a route around it, and this is a fact rather than an opinion.
3. Read the significant conditions of any bonus in full. Reason: since 19 January 2026 wagering requirements are capped at 10 times and mixed-product offers are banned on British licences, so a multiple above 10 or a spin-and-bet hybrid is a signal about where the app is licensed.
4. Find the customer-funds rating and the complaints route. Reason: an operator rated "not protected" must remind the customer once every six months that funds are not protected in insolvency, stating the value of funds held, and an ADR route after eight weeks is a licence condition, not a courtesy.
5. Set a financial limit before the first deposit. Reason: since 31 October 2025 all gambling businesses must prompt customers to set a financial limit before their first deposit and make it easy to review and alter it, remind customers every six months to review their account and transaction information, and offer financial limits using a free-text box at account level. Under RTS 12E, setting a limit must be presented as the default option, and the customer must take an action to decline setting a limit and confirm that decision.
6. Pay by a method that has a route back. Reason: licence condition 5.1.2, effective 31 January 2024, requires licensees to accept payment from Great Britain customers only by a method whose provider is a payment service provider within the Payment Services Regulations 2017 — and it has been illegal since 14 April 2020 to gamble with a credit card, including via an e-wallet loaded from one.

Where the Offshore Apps Get It Wrong

The good and the bad are worth separating, because "offshore" alone tells you nothing.

The serious jurisdictions publish fees, seals and registers. A Curaçao B2C licence carries a one-time non-refundable application fee of EUR 4,592, plus EUR 150 per ultimate beneficial owner and EUR 150 per qualified interest holder, and a total annual fee of EUR 47,450 — a EUR 24,490 licence fee to the National Treasury and a EUR 22,960 supervisory fee to the Curaçao Gaming Authority, payable in full by 15 January. Malta's B2C regime charges a one-time non-refundable EUR 5,000 application fee, a non-refundable fixed annual licence fee of EUR 25,000, and gaming tax of 5 per cent of gaming revenue generated, with minimum issued and paid-up share capital of EUR 100,000 for Type 1 and Type 2 licences. Anjouan's published schedule is EUR 17,828 for B2C licence issuance, one-time, and EUR 17,828 for annual renewal, identical for B2B, with EUR 500 per additional domain or URL. Kahnawà:ke charges a Client Provider Authorisation application fee rising from USD 35,000 to USD 40,000 on 1 January 2027.

The regimes have tightened, too. In Curaçao the National Ordinance on Games of Chance took effect on 24 December 2024, making the Curaçao Gaming Authority the direct licensing and supervisory authority and replacing the old master-licence and sub-licence model; legacy "orange" sub-licence certificates ended on 15 October 2025, and a historic /JAZ number or legacy seal must not be treated as independent proof that an operator currently holds a valid licence. The Curaçao Gaming Authority issues a Certificate of Operation Seal only for an approved and registered player-facing domain, and clicking it must redirect the user to cert.cga.cw — if the certificate behind the seal shows a different domain name from the site being accessed, the site is displaying a certificate belonging to another operator and should be considered unauthorised or fraudulent. That is a genuinely useful check, and it is one the Commission's own public register makes unnecessary in Britain.

Then there is the end of the market where a "licence" is not one. Costa Rica does not operate a comprehensive gambling licensing regime and has no formal framework for issuing gambling licences; the "data processing license" sometimes referenced in the industry is not a licence in the strict legal sense. Its Legislative Assembly rejected Bill No. 25,057 in early 2026, which would have introduced a mandatory licensing regime. Under Costa Rican law, games of chance where the outcome depends primarily on luck are generally prohibited, and only land-based casinos integrated into qualifying hotels are authorised.

The Anjouan paperwork deserves a particular kind of scepticism. Anjouan Gaming says an independent legal opinion issued on 19 September 2024 and reconfirmed in February 2026 by a law firm regulated in England and Wales and Quebec confirms the Anjouan Offshore Financial Authority is the lawful regulatory authority there — that is the licensee's own statement, and I would treat it as one. An ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around EUR 17,000 per licence per year, and that Comoros financial intelligence officials described Anjouan Corporate Services as operating illegally; the same investigation reported a former attorney-general of the Comoros describing Anjouan Licensing Services as "an illegal entity", and that the AOFA was stripped of its status as a recognised regulator by Comorian banking laws passed in 2013 and 2015. Anjouan Gaming's own statement of 10 June 2026 is the most sensible thing anyone has said on the subject: "An Anjouan Internet Gaming Licence is not, and has never been presented as, a universal authorisation to operate in every country in the world."

Sensible or not, the British position is unaffected. Section 33 of the Gambling Act 2005 makes it an offence for a person to provide facilities for gambling without an operating licence, and on summary conviction carries imprisonment for a term not exceeding 51 weeks, a fine not exceeding level 5 on the standard scale, or both. It is immaterial whether the facilities are provided wholly or partly by remote communication, and whether they are provided inside or outside the UK; for remote gambling, section 33 applies if at least one piece of remote gambling equipment used is situated in Great Britain, or if the person providing the facilities knows or should know that the facilities are being used, or are likely to be used, in Great Britain. The Commission states plainly that it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a licence from the Commission, including where the operator holds a licence in another jurisdiction. Advertising catches its own offences too: section 330 covers knowingly advertising unlawful gambling, section 331 the advertising of foreign gambling facilities.

What that produces, for a player, is a particular kind of arithmetic. The Commission's industry warning notice of 20 January 2025 flagged casino games supplied by licensed operators appearing on unlicensed websites available to GB consumers, noting that such sites often target customers who have self-excluded via GamStop and may have inadequate social responsibility and anti-money-laundering controls. That is the mechanism in one sentence: a game that looks identical, a licence that is not, and a marketing pitch tuned precisely to people the British system has just excluded. Kahnawà:ke, by contrast, states that its own voluntary self-exclusion is permanent and irrevocable, and that a player who breaches a self-exclusion prohibition forfeits any funds deposited or won to a third-party charity selected by the Commission — a rule I rather admire, and one no marketing department will ever quote.

The regulator's own tools are limited by design. It is a regulator and not an ombudsman, so it cannot resolve individual gambling complaints or help consumers get their money back, though it records all complaints and typically refers disputes to an independent third party. Reporting payment transaction data to the Visa Operator Scheme is described by the Commission as a critical and still early-stage part of its strategy — it made its first referral to Visa in January 2025 following a test purchase on an unlicensed website, and has since made three more covering three separate unlicensed websites. The Illegal Gambling Taskforce's terms of reference were published by DCMS on 13 May 2026, with three priorities: reducing payments to and from illegal operators, tackling online advertising of illegal gambling, and improving cross-agency enforcement; it runs for 12 months and meets at least twice a year.

Which leaves the number I keep coming back to. In the quarter April to June 2025, 108 illegal websites were geo-blocked by their operators and 22 were removed or suspended by a registrar or host. Those are the interventions that work — and they are the small numbers next to 214 search-engine removals. The Commission has said as much itself.

FAQ

Does a Real-Money App Have to Be Licensed in Britain?

No. An app can run on a Curaçao, Maltese, Anjouan or Kahnawà:ke licence and still move money. But if it holds no Gambling Commission licence it is not licensed in Great Britain, and the British protections — the 10× wagering cap, the reverse-withdrawal ban, customer-funds disclosure and access to an approved ADR provider — do not apply. GamStop does not reach it.

Which Apps Pay Out Fastest?

On the evidence, the licence matters less than the withdrawal rail. Commission data covering June to September 2024 records 44.2 million withdrawals by customers of large online operators; 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours and 0.1 per cent took up to 48 hours. After that, Faster Payments completes over 90 per cent of transactions in under 2 seconds, and Visa Direct Fast Funds can make funds available within 30 minutes of approval. A payout is only as fast as the slowest step.

Are There Casino Apps That Pay Real Money With No Deposit?

There are, and the arithmetic is unkind. Offshore no-deposit bonuses are typically subject to wagering requirements in the 40× to 60× range with a cashout cap of €50 to €100, per a 2026 casino-guide comparison, and that summary is unconfirmed by any regulator. The Commission's own history is instructive: it consulted on an outright ban or caps at 1, 5 or 10 times wagering, and chose 10, saying the limit "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements". No deposit, deeper play-through.

What About Free Casino Apps That Pay Real Money?

A free app that pays real money is generally one of two things: a play-for-fun app with no cash withdrawal at all, or a real-money app that happens to be free to download. The second is the licence question again. Where real money is at stake on a British licence, the protections bite — a customer's un-staked deposits remain their, and account inactivity cannot be used to confiscate or deduct any part of a consumer's deposit balance. Free to install, not free to misunderstand.

Is There a Legit Casino App That Pays Real Money Instantly?

"Instantly" is marketing. The Commission permanently banned reverse withdrawals from 31 October 2021, so a withdrawal cannot be un-requested, and licence condition 17.1.1 restricts demanding fresh documents at withdrawal if they could reasonably have been sought earlier. But no fixed maximum number of days for completing a withdrawal exists in the LCCP at all: the regime relies on fair and open terms, identity verification and the prohibition on unfair terms. The £900,000 settlement announced on 21 October 2026 for a one-withdrawal-at-a-time term shows the route to a complaint that sticks.

Can a Casino App Pay Real Money to Cash App or a Crypto Wallet?

The rail decides the experience, and both rails have published costs. Crypto withdrawals are on-chain fast and exchange-slow: Bitcoin targets a 10-minute block interval, with only about a 63% chance of a block within any 10-minute window, and USDT on TRON always burns Energy because it is a smart-contract call — roughly 13 TRX for a standard transfer, roughly 26 TRX to a new wallet. Payment methods are also a licence matter in Britain: licence condition 5.1.2 requires licensees to accept payment from Great Britain customers only by a method whose provider is a payment service provider under the Payment Services Regulations 2017.

What Happens if an Unlicensed App Refuses to Pay?

Very little through the British system, which is the honest answer. GamStop Online blocks participation in operators licensed in Great Britain only, and the Commission is a regulator, not an ombudsman: it cannot resolve individual gambling complaints or get anyone's money back. There is no ADR route with an offshore operator unless its own regulator imposes one — Anjouan requires licensees to designate an Authority-approved ADR provider and resolve complaints within 30 days before escalation, and Kahnawà:ke employs a full-time Dispute Resolution Officer. The Commission's disruption figures, 3,140 notices since April 2024, are aimed at the site, not the debt.

Summary of Casino App Payouts

The phrase "casino apps that pay real money" describes a licence, a rail and a set of terms rather than a piece of software, and the British version of that arrangement is unusually well documented: 96.3 per cent of 44.2 million withdrawals clearing automatically, a wagering cap of 10 times in force since 19 January 2026, and a public register that lets anyone confirm in minutes whether the app in front of them is in the system at all. The offshore end of the market is not uniformly bad — Curaçao now licenses directly at EUR 47,450 a year and publishes a domain-specific Certificate of Operation Seal, Malta charges a EUR 25,000 annual licence fee and publishes a list of Unauthorised URLs, and Anjouan's own regulator has said its licence is not a universal authorisation. What none of them supplies is the British safety net, and that is the trade being offered. As of 13.11.2026, the number worth carrying away is the one from the Taskforce's preferred ground: in the quarter April to June 2025, just 22 illegal sites were removed or suspended by a registrar or host, while 214 came off search engines. The removals that work are the small ones — and anyone who needs help rather than analysis can ring the National Gambling Helpline, operated by GamCare, free on 0808 8020 133, 24 hours a day, every day of the year.

The scheme's name is often typed "gamestop"; the register spells it GamStop.