Slots Without GamStop and the Regulator's Role

Slots without GamStop means playing online slots at an operator that holds no Great Britain licence, so the national self-exclusion scheme never sees the account. Offering gambling to British consumers without a Commission licence is illegal under section 33 of the Gambling Act 2005, whatever licence the operator holds elsewhere.

Registration with Gamstop Online blocks a person from gambling with every online operator licensed in Great Britain, for six months, one year, five years, or five years with auto-renewal. It takes a few minutes to sign up and up to 24 hours to take effect. The scheme is often typed "gamestop" — a slip the word "game" invites — but GamStop is the name. Once registered, the exclusion cannot be cancelled during the term, and it holds afterwards until the person contacts Gamstop to remove it. Nothing about that changes because someone finds a site the scheme cannot reach.

That last point is where this column begins, because the market for slots without GamStop is not a secret and never has been. The Gambling Commission's Illegal Markets team has spent the last two years chasing it in public, and its own reports are the most useful thing anyone has written about these sites. Its figures say more than any affiliate page will. So the question worth asking is not whether such sites exist — they plainly do — but what the regulator actually manages to do about them, and what the paperwork of a site with no British licence really tells you.

What the regulator does about unlicensed sites

The Commission does not arrest anybody at a server rack. Its tools are notices, referrals and search results, and it publishes the tallies.

Since April 2024 the Illegal Markets team has issued 3,140 cease and desist and disruption notices — 2,032 cease and desist notices, 774 referrals to registrars, 402 to hosts and 3 to payment providers. Over the same period it referred 447,778 Bing and Google URLs and secured 287,961 removals. Across 160 illegal gambling websites for which traffic data existed, engagement fell by an average of 32 per cent after disruption.

Not all methods are equal, and the Commission says so itself. Registrar blocks and website suspensions produced the largest average fall in engagement, 91 per cent each, ahead of GEO IP blocking at 60 per cent, Bing removal at 52 per cent, Google removal at 30 per cent and Facebook removal at 8 per cent. Search-engine removal makes a site harder to find; it does not close it. That distinction matters enormously to anyone who thinks a delisted site is a stopped site.

The tempo has not slackened. In the quarter January to March 2026 the Commission referred 226 websites to search engines and issued 98 cease and desist notices. In April to June 2026 it referred 366 websites — 147,721 URLs — and began no criminal investigations at all. In July to September 2026 it referred 1,835 websites, comprising 7,677,211 URLs, and issued 546 cease and desist notices. Across April 2025 to March 2026, every quarter recorded either zero or one prosecution commenced, one in total.

The pattern is a nuisance strategy, not a police action. Sites are buried in search results, blocked at the registrar, occasionally geo-blocked by their own operators. The Commission made its first referral to Visa in January 2025 after a test purchase on an unlicensed site and has since made three more. Reporting payment transaction data to the Visa Operator Scheme it calls critical and still early-stage. I would read "early-stage" as the honest word of the lot.

Thousands of slots, one omission

And yet the market is small in the aggregate — smaller than the trade press likes to suggest. The Commission's analysis published 5 November 2026 estimates that 0.6 per cent of respondents, including non-gamblers, engaged with illegal gambling websites in the previous four weeks, and a further 0.4 per cent within twelve months. Among those who had gambled online in the past four weeks, the estimate is 2.5 per cent, with 1.5 per cent more in the year. Its dashboard recorded 586 illegal gambling websites accessible to British consumers in September 2026.

Industry estimates differ, and I would treat all of them with tongs. H2 Gambling Capital puts stakes with illegal operators in the UK at £16.6 billion in 2025, up from about £5 billion in 2019, with the legal share falling from 97 to 92 per cent. A Frontier Economics study for the Betting and Gaming Council conservatively estimated £2.7 billion staked annually online on the black market; Yield Sec, working for the Campaign for Fairer Gambling, put unregulated online at 9 per cent of a £8.8 billion market in 2025. The spreads alone tell you whose interests are being argued. What none of them disputes is the direction of travel: more money, more sites, more tactics.

The Mechanics of Licence Participation

A slot site without GamStop is not a site that has forgotten to connect to the scheme. It is a site that sits outside the licence condition that requires participation. The requirement lives in social responsibility code provision 3.5.5 of the Licence Conditions and Codes of Practice: "Licensees must participate in the national multi-operator self-exclusion scheme." It has applied since 31 March 2020, when operators were given a January 2020 deadline notice. In April 2020 the Commission added the requirement to check the entire customer base against Gamstop Online registration at least every 24 hours, which also stopped registered people receiving direct marketing. Two operators, an unnamed licensee and Sportito, had their licences suspended on 3 April 2020 under section 118(2) of the Gambling Act 2005 for missing the 31 March deadline.

Offshore operators are not bound by any of it. Sites holding no Commission licence are not connected to GamStop and are not covered by it [unconfirmed] — a statement that comes from trade and press sources rather than a regulator page, though it is consistent with Gamstop's own terms of use. The obligations attach to licence holders; no licence, no obligation.

The scale of the exclusion scheme is worth holding in mind here, because it is the thing being sidestepped. Gamstop Online recorded 117,756 new registrations during 2025 and 561,983 active exclusions at the end of that year. By July 2026 it reported 614,738 consumers on the register, of whom more than one in two had chosen the maximum five-year term. Of the periods selected in 2025, 29 per cent chose six months, 24 per cent a year, 25 per cent five years and 22 per cent auto-renewal. Registrations in the first half of 2026 ran 16 per cent ahead of the previous year, with May 2026 setting a monthly record of 12,236. Under-25s accounted for nearly one in three of all self-exclusions in that half-year, a 26 per cent annual rise. Half a million people, and the register keeps growing.

Comparing Licensed and Unlicensed Sites

The comparison worth making is not brand against brand; it is term against term. Below is the same slot-playing arrangement seen from a licensed operator and from an unlicensed one, by criterion.

Read the middle column as a floor, not a compliment. The £5 stake limit, the £2 limit for 18 to 24s and the 2.5-second gap between spins came from the 2025 operating licence amendment regulations; the ten-times wagering cap arrived on 19 January 2026 by way of social responsibility code 5.1.1. None of it is clever design so much as a series of floors installed under pressure. Offshore, there is no floor at all.

The Importance of Identity Verification

The thing this topic turns on is identity. Everything else — the licence, the exclusion, the payout — hangs off knowing who the customer is. The Gambling Commission's licence condition 17 requires a licensee to obtain and verify information establishing a customer's identity before permitting them to gamble, and the information must include name, address and date of birth. Before a customer deposits, they should be told what documents may be needed, in what circumstances and in what form.

The first time on a competent site, this usually means nothing at all in practice. Operators can verify against credit reference agencies and the electoral roll, and no paperwork changes hands. The hybrid approach lets a remote casino identify and verify age at registration and defer full verification until the €2,000 threshold under the money laundering regulations is crossed. Later, verification becomes an ordinary event: a check on an old account, a re-verification after a change of address, a source-of-funds question at high deposits. Licence condition 17.1.1 forbids a withdrawal request being the moment additional information is first demanded if the operator could reasonably have asked earlier. That prohibition does not override a separate legal duty, such as an anti-money-laundering requirement — so the legitimate late check exists, narrowly.

The warning signs are specific. Documents requested only at withdrawal, for the first time, on an account that has run for months. "Fuzzy matching" through third-party providers that onboard on partial or equivocal verification — the Commission named that concern in August 2026. A middle name registered where a forename belongs, which creates mismatches against records held elsewhere, including Gamstop's. Over a quarter of complaints reaching the Commission's Contact Centre concern identity verification, and it is among the most common dispute types referred to ADR providers. An offshore site has no equivalent duty, and the Commission's 2026 risk assessment notes rising use of false documents, deepfake videos and AI face swaps to defeat customer due diligence. The remote casino sector is rated high risk for money laundering, unchanged from the previous rating.

Five signs a slot service can be trusted

None of these requires a licence number memorised or a lawyer on retainer. Each is a two-minute check.

The licence matches the register

Click through to the Gambling Commission's public register and check that the site's activities and its domain names appear. The Commission advises exactly this, and a site that names a regulator but cannot be found on that regulator's register is answering a different question from the one being asked.

The licence seal itself verifies

Offshore seals are checkable too, and often are not checked. A Curaçao Certificate of Operation Seal must redirect to the regulator's own verification domain; if the design, colour or format differs, the site is not authorised. And if the certificate behind the seal shows a different domain name from the one being visited, the site is displaying another operator's certificate. Anjouan certificates carry a unique licence number and a QR code linking to a public register, and certificates that cannot be verified there should not be relied on.

The withdrawal terms pass the smell test

Look for a maximum withdrawal limit on deposit balance, a sole-discretion clause letting the operator void winnings, or a single-withdrawal-at-a-time rule. All three have drawn regulatory action: a £900,000 settlement in October 2026 concerned, among other things, a term allowing only one withdrawal request at a time and manual review of every fifth or tenth withdrawal. Fafabet was fined £170,000 in July 2025 for, among other failures, a term reserving the operator's discretion to close accounts or forfeit winnings.

The bonus terms are readable in one click

Significant conditions to a promotion — qualifying spend, wagering, cashout caps, maximum bets during wagering — must be transparent and prominent, and where shown online, displayed in full no further than one click away. A page that makes the headline offer loud and the conditions vague has told you what it thinks of its customers.

The complaints route leads somewhere independent

Free-of-charge ADR after eight weeks is a licence requirement for British operators, and the approved list includes long-standing gambling specialists. Look for a named provider and its contact details in the terms. Offshore, Anjouan requires licensees to designate an approved ADR provider and name it in player-facing terms; Kahnawake employs a full-time dispute resolution officer. A site with no named route is a site with no route.

How to vet an unlicensed slot site in six steps

Anyone curious enough to look can do these in an evening. All of them are ordinary and lawful — checking paperwork, reading terms, asking a regulator's register a question.

1. Find the licence claim and test it against the regulator's own register. Reason: a licence claim is marketing until the issuing authority confirms it, and registers are public.
2. Check the seal's own verification link, not the site's description of it. Reason: a clickable seal that does not resolve to the regulator's verification domain is the cheapest forgery in the trade.
3. Read the withdrawal section of the terms before the bonus section. Reason: the payout clause, not the offer, is where an operator's economics show, and maximum withdrawal limits and sole-discretion clauses are visible there.
4. Read the bonus wagering figure, the cashout cap and the maximum bet while wagering. Reason: those three numbers decide whether a bonus is worth anything, and offshore multipliers run at multiples of the ten-times cap that binds British operators.
5. Search the named regulator's enforcement and warning pages, plus the Commission's unlicensed-site notices. Reason: regulators publish what they have done about specific operators, and the Commission has issued warning notices about licence-holder games surfacing on unlicensed sites.
6. Write down the complaints route and the help numbers before depositing anything. Reason: the moment a dispute is live is the worst moment to start looking for a free adjudicator, and an unlicensed site has no duty to provide one.

Why an offshore licence is not a safety certificate

The regulators named by offshore sites are real institutions with real paperwork, and I am not going to pretend otherwise. Curaçao replaced its old master-licence and sub-licence model with direct licensing by the Curaçao Gaming Authority when the National Ordinance on Games of Chance took effect on 24 December 2024. Application for a B2C licence costs a one-time EUR 4,592, and the total annual B2C fee is EUR 47,450. Anjouan's published fee schedule is EUR 17,828 for B2C issuance and the same for annual renewal, with EUR 500 per extra domain. Kahnawà:ke has regulated interactive gaming since 1999 and issues a single Interactive Gaming Licence held by one entity since 1999, with Client Provider Authorizations underneath it. Malta charges a EUR 25,000 annual licence fee plus 5 per cent gaming tax on revenue.

Now compare the currencies. A British licence brings with it a stake limit, a spin timer, a wagering cap, a reverse-withdrawal ban, a credit card ban, a customer-funds disclosure and a free ADR route. An offshore licence brings a fee receipt. Anjouan said as much itself on 10 June 2026: a licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world", and no licensing authority can exempt an operator from local law where local authorisation is required. Its own statement, and a fair one.

The Curaçao picture is messier than the sales copy suggests. The legacy "orange" sub-licence certificates of operation ended on 15 October 2025, and a historic /JAZ number must not be treated as proof of a current licence. Licensing ceased for the four former master licensors between August 2024 and January 2025. Provisional licences granted by operation of law were extended to 24 December 2025. On 7 October 2026 the regulator said its previous portal would not return to service and that the digital licence seal may be affected by the transition — while insisting existing licences stay valid. Anjouan's own verification framework makes the same demand as everyone else: certificates that cannot be verified through the public register should not be relied upon.

Where a site operates under no licence at all, the position is thinner still. Costa Rica has no comprehensive gambling licensing regime, and the "data processing licence" sometimes cited is not a licence in the strict legal sense. Its Legislative Assembly rejected the bill that would have introduced mandatory licensing in early 2026.

What a spin at an unlicensed site actually risks

The Gambling Commission's Consumer protection framework is not magic, but it is a floor under the money. Customer funds must be held in a separate client account, and an operator must declare one of three insolvency protection ratings, telling the customer which applies. That is not a guarantee of repayment if the business fails — the Commission says so plainly, and businesses may hold customer funds in overseas accounts. But it is a declaration, and an untrue one is actionable. An unlicensed site makes no such declaration and owes no such duty.

A British licence also means the ten-times wagering cap that has applied since 19 January 2026, in a market where the Commission noted some licensees had been applying multiples of up to 60 times. It means the ban on mixed-product promotions, in force the same day. It means a minimum of 2.5 seconds between slot game cycles and a £5 stake ceiling — £2 for the 18-to-24 group — since 2025. It means no reverse withdrawals since 31 October 2021, when requirement 14B came in with the words "Consumers must not be given the option to cancel their withdrawal request". It means credit cards were banned for gambling on 14 April 2020.

And it means a free route to an independent adjudicator after eight weeks. That route has its own numbers, and they are not flattering to anyone's marketing department. In eCOGRA's report for 1 October 2024 to 30 September 2025, "Deposits & Withdrawals" accounted for 150 valid disputes, the average domestic resolution took 31 days, and 17.8 per cent of completed disputes went the consumer's way. IBAS handled 3,721 domestic disputes in 2024-25, 217 of them banking and financial, completing them in an average of 20 days and upholding 65 complaints by written decision, with 100 per cent operator compliance with decisions in the consumer's favour. A low win rate and a slow clock, but a decision at the end of it. Offshore, the decision is the site's own.

GamStop and the exclusion that does not lapse

One myth deserves a paragraph of its own, because it is the reason this search exists. Signing up with Gamstop Online for six months, a year, five years or five years with auto-renewal means the exclusion cannot be cancelled or deactivated during the period chosen. It also means the exclusion stays in place after the end of that period unless the person contacts Gamstop to remove it. The Group's 2025 annual report devotes a section to its refusal to remove registrations before the chosen term ends, and if no deactivation happens, it holds the data through a further automatic seven-year self-exclusion period during which operators are told the person was previously excluded. Auto-renewal can only be turned off during the last six months of a five-year minimum exclusion period, and continues for up to four further five-year periods.

An offshore site is not a way round that. It is a way of not being checked, which is a different thing with a worse ending. The Commission's warning notice of 20 January 2025 said the quiet part: unlicensed sites often target customers who have self-excluded via GamStop and may have inadequate social responsibility and anti-money-laundering controls. That is what an unlicensed slots site is for, more often than not. A person on the register who signs up somewhere unchecked has not resumed playing under supervision; they have moved to the part of the market with no supervision at all.

Help, and where the money goes

The treatment system these stakes help fund has grown teeth. The statutory levy commenced on 6 April 2025 and raised just under £120 million in the year reported, ringfenced for research, prevention and treatment and split 50 per cent treatment, 20 per cent research, 30 per cent prevention. From 1 April 2026 NHS England took commissioning responsibility for gambling-harms treatment in England, funded at roughly £100 million a year. For anyone who needs it: the National Gambling Helpline is free on 0808 8020 133, operated by GamCare, 24 hours a day, every day; callers in Wales have a separate number on 0808 2819 265. GamFam supports families through its GRA5P programme, Citizens Advice Scotland runs a gambling support line on 0800 328 1131 on weekdays, and NHS specialist gambling clinics now operate across England.

The people using that system are not an abstraction in the data either. Gamstop Online registrations in the first half of 2026 rose 16 per cent year on year. 2.4 per cent of adults surveyed for the Gambling Survey for Great Britain's third annual report scored 8 or more on the Problem Gambling Severity Index — stable at 2.5 per cent in 2023, 2.7 per cent in 2024 and 2.4 per cent in 2025 — while 3.4 per cent of those who had gambled in the past 12 months had sought help for their own gambling.

Assessing the Market Claims

Strip the affiliate prose away and the offer at an unlicensed slot site reduces to one thing: text drawn bigger, checks drawn smaller. The product being sold is a missing database query — the daily check that a licensed operator is required to run and an unlicensed one cannot run at all. Everything else in the package, the multipliers, the cashout caps, the withdrawal friction, the terms reserving sole discretion, is downstream of that single omission. The Commission's own enforcement numbers describe an unlicensed market that is large, persistent and chased with notices, search removals and registrar blocks rather than with prosecutions — one commenced across the four quarters to March 2026. A business can survive that. It cannot survive losing its registrar or its payment rails, which is why the Commission's own reporting names registrar blocks at 91 per cent effectiveness against Google removals at 30.

For a slot player in Great Britain, the practical reading is unsentimental. If a licensed operator is the comparison standard, the unlicensed one is not an equal option with fewer restrictions; it is a different kind of counterparty, without a stake limit, without a spin timer, without a wagering cap, without a funds declaration and without an adjudicator. The register is not a shameful list — 614,738 people were on it in July 2026, and more than half of them chose five years — and it holds for its term and then holds longer, until the person themselves asks GamStop to lift it.

One final figure for anyone weighing the trade. The Commission's Illegal Markets team referred 1,835 websites to search engines in the three months to September 2026, a period in which it issued 546 cease and desist notices across 7,677,211 URLs. Whatever the marketing says, those sites are not a safe harbour. They are a queue.

Frequently Asked Questions

Are slot sites without GamStop legal?

The site is the problem, not the player. Section 33 of the Gambling Act 2005 makes it an offence to provide gambling facilities without the appropriate operating licence, with a maximum of 51 weeks' imprisonment on summary conviction, a fine at level 5, or both — six months in Scotland. The Commission states plainly that offering commercial gambling to British consumers without its licence is illegal, including where the operator holds a licence in another jurisdiction. Adult customers commit no equivalent offence by playing.

Why do some slot sites not appear on GamStop?

Because they hold no licence from the Gambling Commission, and the duty to join the scheme sits in the licence. Social responsibility code provision 3.5.5 requires licensees to participate in the national multi-operator self-exclusion scheme, and since April 2020 they must check their whole customer base against Gamstop Online registration at least every 24 hours. An operator outside that regime has no such obligation, and the scheme itself says it cannot block services run by organisations that do not participate.

Can I get round a GamStop exclusion by playing offshore?

The exclusion does not lapse, and no separate site changes that. A Gamstop Online registration blocks the person from gambling with every online operator licensed in Great Britain for the chosen term, cannot be cancelled during it, and stays in place afterwards until the person contacts Gamstop to remove it. An offshore site is simply one that never runs the check. The Commission's January 2025 warning notice says unlicensed sites often target self-excluded customers, with weaker social responsibility and anti-money-laundering controls.

Do unlicensed slot sites pay out?

Some do, for a while, and the terms decide the rest. The clauses worth reading are the maximum withdrawal limit, which British operators cannot lawfully impose on deposit balance but offshore sites commonly do, and the maximum bet while wagering a bonus, breach of which can forfeit the bonus and the winnings from it. Without a Commission-approved ADR route, the only forum for a disputed payout is the operator's own complaints procedure — or a court, at the player's own expense.

What is the maximum stake on slots without GamStop?

There is none, and that is the point rather than the perk. In Great Britain the maximum stake per game cycle for online slots has been £5 for all adults since 9 April 2025 and £2 for those aged 18 to 24 since 21 May 2025, imposed by regulations attaching a condition to every remote casino operating licence. A minimum of 2.5 seconds must also elapse between game cycles. None of those limits follows a player offshore, and the speed is part of what such sites are selling.

How do I check whether an offshore licence is genuine?

Use the regulator's own verification tool rather than the site's description of it. A Curaçao Certificate of Operation Seal must redirect to the regulator's official certificate domain; a different design or format means no authorisation, and a certificate naming a different domain means another operator's certificate is on display. Anjouan certificates carry a licence number and a QR code linking to a public register. A historic /JAZ number from Curaçao proves nothing about a current licence.

The last word on slots without GamStop

The market for slots without GamStop exists because the scheme blocks a licence, not a person, and a licence is something an operator can decline to hold — which makes the omission the product, the missing daily self-exclusion check the thing actually on sale, and the regulator's answer a stream of notices, registrar referrals and delistings rather than the courts. Gamstop Online held 614,738 people on its register in July 2026, and the exclusion stands for its full term and then stands until the person asks GamStop to remove it.