A gambling app in the UK is either run by a company holding a Gambling Commission licence or by one that is not licensed here at all. The licensed ones must join GamStop, verify identity before play, and answer to British consumer law. The unlicensed ones answer to nobody in Britain.
Most of the interesting material about gambling apps uk sits where the two categories meet. A phone makes the difference hard to see: the same icon, the same spinning reels, the same cheerful notification at half past nine in the evening. What sits behind that icon is either a company on the Commission's public register, bound by licence condition 17.1.1 to verify who you are before you stake, or a company holding a certificate from a jurisdiction that has never heard of the Consumer Rights Act 2015.
The Gambling Commission's Illegal Markets team has been unusually busy on this point. In the quarter July to September 2026 it referred 1,835 websites to search engines — 7,677,211 URLs — and issued 546 cease and desist notices to illegal operators. The quarter before, April to June 2026, produced 366 website referrals and 147,721 URLs. Those numbers rise and fall with the team's own campaigns, but the direction of travel is plain enough.
Table of Contents8
- The Role of the Licence in Every Gambling App
- Five Signs an App Can Be Trusted
- Payout Speed by the Method Behind the App
- Best UK Gambling Apps Compared by Licence
- How the Regulator Actually Handles an Unlicensed App
- Where the Self-Exclusion Question Actually Stands
- Questions About Gambling Apps
- The Register Is the Whole Argument
The Role of the Licence in Every Gambling App
Best gambling apps uk and the licence
Everything about a gambling app follows from where its licence was issued. A Great Britain licence, granted by the Gambling Commission, carries a set of conditions that no operator can trade around. It must participate in the national multi-operator self-exclusion scheme — the requirement sits in social responsibility code provision 3.5.5 of the Licence Conditions and Codes of Practice, which states flatly that "Licensees must participate in the national multi-operator self-exclusion scheme". It must tell a customer before their first deposit what identity documents they might need and when. It must not accept a credit card, a ban in force since 14 April 2020. It must not offer a wagering requirement above ten times bonus funds, since 19 January 2026. And it must let a financial limit be set before the first deposit, the default option since 31 October 2025.
An offshore licence carries none of that. A Curaçao licence, an Anjouan licence, a Kahnawake Client Provider Authorization — each of these is a real document issued by a real authority, and each one tells you nothing about how the app will behave when a withdrawal request lands. The Commission's own position is blunt: it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence, and that includes an operator holding a licence in another jurisdiction.
What happens the first time, and what happens later
The identity check is where the two worlds diverge most sharply, and it is the single mechanic this whole topic turns on. Under licence condition 17, introduced on 7 May 2019 and still the spine of the regime, a British-licensed operator must obtain and verify information establishing a customer's identity before that customer is permitted to gamble. That information must include name, address and date of birth at minimum. Many operators match the account against credit reference agencies and the electoral roll, in which case nobody ever sees a document. Where the match fails, a passport, a driving licence or a household bill gets requested.
The first time, then, is usually invisible: an account opens, a deposit clears, play begins. Later is where it bites. The Money Laundering Regulations 2017 require identification and verification in a remote casino once deposits or withdrawals reach €2,000 — and the threshold applies both to a single transaction and to transactions that appear to be linked, including ones within a single logged-on period. So an app can quite lawfully let a player spend a fortnight unbothered and then ask for documents the moment the pattern crosses a line.
The warning signs are worth naming. A request for documents that arrives only when a withdrawal is attempted, having never been mentioned at deposit, is precisely what licence condition 17.1.1 forbids — a withdrawal request must not trigger a demand for information the licensee could reasonably have sought earlier. A demand for a selfie or bank statements out of nowhere is a different animal: that is the anti-money-laundering machinery, and it is legitimate. The Commission has said that over a quarter of the complaints reaching its Contact Centre concern identity verification, and that operators onboarding customers on partial or equivocal verification — a middle name instead of a forename — create mismatches with records held elsewhere, including GamStop. That last detail matters more than it looks: a self-exclusion that fails to bite because the name did not match is a self-exclusion that did not happen.
Five Signs an App Can Be Trusted
It appears on the Commission's public register
The Gambling Commission advises anyone checking a gambling business to confirm it holds a British licence and to click through to the public register to see whether the site's activities and domain names match. The domain-name part is the step people skip. A licence that names a different address is a licence held by someone else.
The identity check arrives before the deposit, not after the win
A British-licensed app tells a customer before they deposit what documents might be needed, in what circumstances and in what form. If the first mention of verification is a frozen withdrawal, the operator is either careless or something worse. The quick check is to look for the verification statement in the terms before staking anything.
Bonus terms are on one page and can be read standing up
Since 19 January 2026 a licensed operator may not apply a wagering requirement above ten times bonus funds, and may not mix betting, casino, bingo and lottery into one incentive. Where a welcome offer's full terms take four clicks and mention a maximum cashout, the operator is outside the British regime — the prohibition on a maximum limit on withdrawing from a deposit balance has been settled policy since the Competition and Markets Authority's undertakings in 2018.
GamStop is named in the app's own account settings
GamStop Online blocks a person from signing up for or using online accounts with gambling companies licensed in Great Britain, and only with those. Every participating operator checks its customer base against the register at least every 24 hours, a requirement the Commission introduced in April 2020. An app that will not say whether it participates is answering the question.
Withdrawals clear without a second conversation
The Commission's data for June to September 2024 recorded 44.2 million withdrawals by customers of large online operators, of which 96.3 per cent cleared automatically and 3.5 per cent within 24 hours. A few years earlier, data from some of the largest firms showed around 99 per cent of withdrawal requests approved, processed and fulfilled within 24 to 48 hours. Anything slower than that gap should be treated as a choice rather than a technical limit.
Payout Speed by the Method Behind the App
| Method | Typical settling time | What to watch |
|---|---|---|
| Card (Visa Direct) | funds available within 30 minutes of approval | real-time payout route; not all apps use it |
| Faster Payments | over 90% complete in under 2 seconds | scheme maximum £1 million; your bank sets its own lower cap |
| Bitcoin | about 63% chance of one block inside 10 minutes | 6 confirmations routinely required; roughly an hour |
| Litecoin | first confirmation about 2.5 minutes | only about 55.43% of six-confirmation spans finish in 15 minutes |
| Skrill / Neteller | bank transfer withdrawal at 2.80% of the amount, minimum EUR 3.50 | the fee is charged on top of the app's own processing |
| Jeton | local bank transfer quoted at 0 to 30 minutes | instant bank transfer carries a 2.5% sender fee instead |
The honest reading of that table is that the app is rarely the constraint. Bank rails and card rails have become fast enough that a same-day payout is unremarkable; what slows a withdrawal down is human review. The Commission has been explicit that where an operator has no regulatory concerns about a customer there is no valid reason to delay a payout, and that it is not acceptable to introduce friction on the way out that did not exist on the way in. Reverse withdrawals — the old trick of letting a player cancel a withdrawal and spend it again — were banned outright for remote operators on 31 October 2021 under RTS 14B.
Delay, though, is a technique. On 21 October 2026 the Commission announced that one licensee, which runs seven websites, would pay £900,000 in a regulatory settlement for failures including unnecessarily delaying consumer withdrawals — a term limiting customers to one withdrawal at a time, and manual review of every fifth or tenth withdrawal for some customers. That is what a built-in delay looks like in the paperwork.
Best UK Gambling Apps Compared by Licence
It is more useful to compare apps by the regime they sit in than by any feature list. Four categories do the work.
A Great Britain licence is the standard of comparison: stake limits, GamStop participation, the ban on reverse withdrawals, the ten-times wagering cap, statutory dispute resolution at no cost. A Curaçao licence is a licence properly issued by the Curaçao Gaming Authority since the National Ordinance on Games of Chance took effect on 24 December 2024, which replaced the old master-licence model. The legacy orange sub-licence certificates ended on 15 October 2025. Since 24 December 2026 supplier registration is fully mandatory there. A Malta licence from the Malta Gaming Authority is a serious regulator with published fees and an Unauthorised URLs list — but an MGA licence is not a British licence, and a website that says "MGA" on its footer is telling you where its permission comes from, not where its duties lie. And a Kahnawake Client Provider Authorization is a permit issued under a regime that has been running since 1999 and which requires operators to be hosted at a specific data centre in the Mohawk Territory.
None of this makes them criminals for existing; it makes them irrelevant to British consumer protection. The Gambling Commission's regulatory remit allows it to regulate gambling websites that trade or advertise to customers in Great Britain, and those websites must hold a Commission licence. A site outside that remit is outside it entirely.
The regulator's actual answer to unlicensed apps is a mix of disruption and attrition. Since April 2024 the Illegal Markets team has issued 3,140 cease and desist and disruption notices — 2,032 C&Ds, 774 registrar referrals, 402 host referrals and 3 payment provider referrals — referred 447,778 Bing and Google URLs, and secured 287,961 URL removals. Measured across 160 illegal gambling websites, engagement fell by an average of 32 per cent after disruption. Registrar blocks and suspensions produced the largest average fall, 91 per cent each, against 30 per cent for Google removals and 8 per cent for Facebook removals. That last comparison is the most interesting number in the whole dataset: hiding a site from search barely dents it, pulling its domain guts it.
I would not put much faith in the size estimates of the black market, and there are several. One market-intelligence firm put stakes with illegal operators at £16.6 billion in 2025, up from about £5 billion in 2019; an industry-commissioned study preferred £2.7 billion online; the Commission's own survey work found that among adults who had gambled online in the past four weeks it estimated 2.5 per cent had engaged with illegal gambling websites, with a further 1.5 per cent in the previous year. Those numbers cannot all describe the same thing, and at least one of them measures an argument rather than a market. The Commission's methodology is candid that it does not capture activity hidden by VPNs. The defensible figure is the small one.
How the Regulator Actually Handles an Unlicensed App
The sequence matters, because it explains why an unlicensed app can seem untouchable for months and then vanish.
- Detection through affiliate pages and search terms. The Commission tracks illegal sites by reading affiliate pages, and added crypto-casino search terms to that method in December 2024. The count identified this way rose from 364 in May 2024 to 535 in July 2025. The reason this works is that an unlicensed operator needs traffic, and traffic is bought in public.
- A cease and desist notice to the operator. 546 of these went out in the quarter July to September 2026 alone. The notice is a formal demand that costs the regulator little and puts the operator on record.
- Referral to registrars and hosts. These produced the 91 per cent average fall in engagement, which is why the Commission now describes registrar blocks and website suspensions as more effective than search-engine removals. A registrar can end a domain; Google can only stop listing it.
- Referral to search engines in bulk. In the quarter April to June 2026 the team referred 366 websites carrying 147,721 URLs; the following quarter it referred 1,835 websites carrying 7,677,211 URLs. The URL counts run into millions because a single site generates thousands of indexed pages, each one an entry point.
- GEO IP blocking. This averaged a 60 per cent fall in engagement across 53 domains — effective, but defeatable by anyone willing to run a VPN.
- Payment disruption. The Commission made its first referral to Visa in January 2025 following a test purchase on an unlicensed website, and has since made three more covering three separate unlicensed websites. The Commission calls this a critical and still early-stage part of its strategy, which is as close as a regulator gets to admitting it is the part that would really hurt.
Progress against all of this is real but slow at the point of prosecution. Across April 2025 to March 2026, every quarter recorded 0 or 1 prosecutions commenced — a total of one, in October to December 2025. Disruption is the strategy; prosecution is a punctuation mark.
Where the Self-Exclusion Question Actually Stands
GamStop is the fact that decides most arguments about offshore apps, so it is worth stating without decoration. Registering with GamStop Online blocks a person from gambling with all online gambling companies licensed in Great Britain for six months, one year, five years or five years with auto-renewal. Once registered, the registration cannot be cancelled or deactivated during the exclusion period, and the exclusion stays in place after that period ends unless the person contacts GamStop to remove it. Auto-renewal can only be switched off during the last six months of a five-year term, and it otherwise continues for up to four further five-year periods. Under the terms of use, a person who does not deactivate is held through a further automatic seven-year self-exclusion period, during which operators are told they were previously excluded. The scheme's group devotes a section of its 2025 annual report to its refusal to remove registrations early.
The scheme is free, and it is not small. GamStop had 561,983 active exclusions at the end of 2025, having recorded 117,756 new registrations during that year. As of July 2026 it reported 614,738 consumers on the register, of whom more than one in two had opted for the maximum five-year exclusion, while across all age groups only one in four had chosen six months. Registrations in the first half of 2026 ran 16 per cent above the same period a year earlier, and May 2026 set a monthly record of 12,236 sign-ups. Under-25s accounted for nearly one in three of those, a 26 per cent year-on-year increase.
Now the important part. GamStop blocks access to gambling websites and apps licensed in Great Britain only, and can only exclude a person from participating operators; it cannot prevent access to services run by organisations that do not participate. The Commission itself issued an industry warning notice on 20 January 2025 about casino games from licensed operators appearing on unlicensed websites available to GB consumers, noting that such sites often target customers who have self-excluded via GAMSTOP and may have inadequate social responsibility and anti-money-laundering controls. That notice is the clearest statement anyone has made on the subject: an unlicensed app is not a way round a self-exclusion, and a site that markets itself that way is telling you what it thinks of its customers.
For anyone who wants a harder barrier than a register, the options that exist are ordinary ones. Bank gambling blocks decline payments categorised under gambling merchant codes, work at card level so must be set on each card, apply a cooling-off period of 48 or 72 hours before gambling transactions resume, and do not touch a credit score. The Commission's list of banks offering one, last updated 16 October 2026, names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling. Blocking software sits alongside: Gamban states it blocks licensed and unlicensed sites, and its free UK licence scheme ended on 31 March 2026, after which it costs £4.99 a month or £29.99 a year in England and Scotland and is free to residents of Wales. BetBlocker states it blocks over 1,368,000 gambling websites and 3,100 apps, requires no registration and is free worldwide.
Help, if it is wanted, is free and does not require anyone's permission. The National Gambling Helpline is operated by GamCare on 0808 8020 133, 24 hours a day, every day of the year, with the same number reaching live chat and WhatsApp. Callers in Wales have a separate number, 0808 2819 265. Gamblers Anonymous England, Wales & Ulster runs around 250 meeting locations on 0330 094 0322 with no appointment needed. The NHS National Gambling Clinic takes self-referrals, and NHS England had opened 15 specialist gambling clinics across England since 2019. Citizens Advice offers free help with debt, and Citizens Advice Scotland runs a gambling support line on 0800 328 1131, Monday to Friday, 10am to 3pm. GamFam supports families and friends of gamblers; Gam-Anon UK & Ireland does the same, regardless of whether the gambler attends meetings.
One last legal point, because it is the one most often misunderstood. Section 33 of the Gambling Act 2005 makes it an offence for a person to provide facilities for gambling without an operating licence, punishable on summary conviction by imprisonment for up to 51 weeks, a fine not exceeding level 5 on the standard scale, or both. The offence is the operator's, and section 33 applies whether the facilities are provided inside or outside the UK. The Act's general offences attach to those who provide facilities, not to adult consumers. That is a careful piece of drafting, and it is the reason a page like this one can say plainly that the risk of an unlicensed app falls hardest on the person running it — while the person using it still carries the risk that no British rule protects them.
Questions About Gambling Apps
What are the best UK gambling apps?
The honest answer is that the best app is the one on the Commission's public register, because everything else follows from that. Roughly 70 per cent of the online market by the Commission's own operator dataset sits with the largest licensed firms, so the field is not narrow. Compare apps by the protections attached to their licence, not by the welcome offer.
Do UK gambling apps have to be part of GamStop?
Yes. Since 31 March 2020 all online gambling operators must be part of GAMSTOP as a condition of their Gambling Commission licence, and the requirement sits in social responsibility code provision 3.5.5 of the LCCP. Operators were notified of the deadline in January 2020. On 3 April 2020 the Commission suspended the licences of two operators for failing to integrate in time.
Are offshore gambling apps legal to use in the UK?
The Commission states it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence, and section 33 of the Gambling Act 2005 makes providing facilities for gambling without a licence an offence whether the facilities are provided inside or outside the UK. The offence attaches to the provider. What an offshore app cannot do is give a user any of the protections that come with a British licence: no GamStop coverage, no free access to a UK-approved dispute resolution service, no protection from the consumer-law rules on withdrawals.
Why is my withdrawal being held for verification?
Over a quarter of complaints reaching the Commission's Contact Centre concern identity verification, and it is one of the most common dispute types referred to Alternative Dispute Resolution providers. A British-licensed operator should have told you before your first deposit what documents might be needed. The Money Laundering Regulations 2017 require identification and verification in a remote casino at €2,000 in deposits or withdrawals, counting linked transactions. Verification itself is legitimate; the timing can still be a breach.
What happens if the app is not licensed?
Little happens to the user legally, and a great deal happens around the site. In the quarter July to September 2026 the Commission issued 546 cease and desist notices and referred 1,835 websites to search engines. Registrar blocks and suspensions produced an average 91 per cent fall in engagement — the most effective tool in the kit, and the one that can take a working app offline without notice. Money held on an unlicensed site has no British insolvency protection attached to it.
Can I get round a self-exclusion by using a different app?
No, and the framing is the problem. A GamStop exclusion holds for its full term and then remains in place until the person contacts GamStop to remove it, and registrations cannot be removed early. It binds every operator licensed in Great Britain, which is checked at least every 24 hours. What it cannot bind are the operators with no British licence — and the Commission's January 2025 warning notice says plainly that unlicensed sites often target exactly those customers.
The Register Is the Whole Argument
The gambling apps uk market rewards one habit above all others: checking a licence before checking a lobby, because the licence is the only part of an app that cannot be redesigned overnight, and in Britain it is backed by rules that treat the withdrawal, not the deposit, as the moment a company shows what it is. The offshore market will keep offering the older terms — the 25-times playthrough, the maximum cashout, the manual review of every tenth request — and the regulator will keep answering with cease and desist notices rather than courtrooms. Since April 2024 it has issued 3,140 disruption notices and secured 287,961 URL removals to make that point. If any of this has stopped being an academic question, the National Gambling Helpline is on 0808 8020 133, day and night.