Gambling Sites UK and How the Regulator Handles Them

A gambling site in the UK is one holding a Gambling Commission licence, which makes it subject to British rules on identity checks, bonuses, withdrawals and self-exclusion. Sites licensed only abroad are not licensed here, so those protections do not apply. The regulator disrupts them rather than licensing them.

The Line Between Licensed and Merely Offshore

The phrase "gambling sites uk" is doing a lot of work in a British search box. To a regulator it means one thing: a business holding a licence from the Gambling Commission, trading under British conditions, on the public register. To a search engine it means several hundred domains, a good number of which are registered in Curaçao, Anjouan or Kahnawà:ke and would be breaking the law if anyone took a close look at where their customers live.

That gap is this page's subject. Not which site pays fastest, but what the machinery of enforcement actually does about the ones outside it. I have spent years reading the Commission's quarterly disruption reports, and the interesting thing is not the totals — large, and growing — but the technique. Britain has chosen attrition over prosecution. Cease and desist letters, registrar referrals, host referrals, search-engine removals and, more recently, payment referrals. Very few arrests. It is the regulatory equivalent of turning off the water rather than evicting the tenant.

It is early and plain to say: offshore sites are not licensed in Great Britain, do not participate in the national self-exclusion scheme, and offer no Commission route to redress. 13.11.2026 is the date of writing. Under section 33 of the Gambling Act 2005 it is an offence to provide facilities for gambling without an operating licence, and the offence sits with the operator, not the customer. If gambling is causing harm, the help bodies are GamCare, Gordon Moody and Gamblers Anonymous, and the National Gambling Helpline is on 0808 8020 133, free, 24 hours a day. I would rather that number appeared twice on a page like this than once.

What the Regulator Says It Removes, and How Much

The one figure worth pinning to the wall is this. Since April 2024 the Commission's Illegal Markets team has issued 3,211 cease and desist and disruption notices — 2,032 cease and desist notices, 774 registrar referrals, 402 host referrals and 3 payment provider referrals. Over the same period it referred 447,778 Bing and Google URLs and secured 287,961 URL removals. That is the period April 2024 onwards, reported in October 2025.

Read those four numbers together and the shape of the strategy appears. Thousands of notices, hundreds of thousands of URLs, and three payment referrals. The Commission calls the payment work critical and still early-stage, which is a polite way of saying the most effective tool is the one it has used least. Meanwhile the tempo is climbing: 226 websites referred to search engines in January to March 2026; 366 in April to June 2026, carrying 147,721 URLs; then 1,835 websites and 7,677,211 URLs in July to September 2026, alongside 546 cease and desist notices. The volume of URLs has gone vertical. I would treat that as a sign of how cheap illegitimate domains have become, not of a sudden surge in criminal enterprise.

The honesty in the Commission's own reporting is worth noting. It says GEO IP blocking and registrar blocks outperform search-engine removal, because taking a site out of Google makes it harder to find without blocking anything. Its measured averages back that up: registrar blocks and website suspensions each produced a 91 per cent average fall in engagement, GEO IP blocking 60 per cent, Bing removal 52 per cent, Google removal 30 per cent and Facebook removal 8 per cent. Across 160 illegal sites with traffic data, the average fall in engagement was 32 per cent.

Compare that with what actually consumes the Commission's calendar. Across April 2025 to March 2026 there was one prosecution commenced, in the quarter October to December 2025. Criminal enforcement is not the mechanism. It never was going to be: the operators are abroad, the directors are abroad, and the servers are abroad.

Licence Shopping and What Each Offshore Regime Amounts To

A cluster of search phrases asks about non-UK registered gambling sites, gambling sites outside the UK, and the crypto ones in particular. The answer is that "licensed abroad" is not a category, it is a spectrum running from a genuine regulator with a fee schedule and a complaint system to a PDF bought from a jurisdiction that has no intention of supervising anyone. The table below compares the regimes by what they actually impose, on the figures published by the regulators themselves.

Two things stand out. The first is that the famous "offshore licence" is not always cheap: a Curaçao B2C licence costs an operator more per year than a Maltese one. The second is that the differences that matter to a player are not the fees but the complaint route and the funds rule, and those are exactly the columns where several regimes are silent.

Curaçao is the one to watch this year, and not for flattering reasons. The National Ordinance on Games of Chance took effect on 24 December 2024 and made the Curaçao Gaming Authority the direct licensing authority, ending the master-licence model; licensing activity ceased for the four former master licensors between 18 August 2024 and 31 January 2025, and the legacy orange sub-licence certificates ended on 15 October 2025. The CGA has since said its previous online portal will not return to service and that it is working out an alternative way to verify licensed domains, because the old digital seal may be affected by the transition.

For a player that means an old /JAZ number or a legacy seal proves nothing, and the CGA's own policy is blunt: clicking a Certificate of Operation Seal should redirect to cert.cga.cw, and a certificate showing a different domain from the one being visited belongs to another operator entirely. Anjouan has a similar rule — certificates carry a QR code that must verify against the public register — and the same jurisdiction is the subject of a December 2025 ABC News investigation reporting that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences, while a former attorney-general of the Comoros called the entity illegal. Anjouan Gaming's own statement on 10 June 2026 concedes the point that matters: a licence there "is not, and has never been presented as, a universal authorisation to operate in every country in the world".

That is the whole business model in one sentence, said out loud by the regulator doing the selling.

The Check Every Offshore Site Fails

If there is one mechanism this entire market turns on, it is the identity check, and offshore it is where the trouble starts. In Great Britain, licence condition 17 has required since 7 May 2019 that a customer's identity be established and verified before being permitted to gamble — name, address and date of birth at minimum. The anti-money-laundering rules add a second layer: in a remote casino, identification and verification are required when deposits or withdrawals reach €2,000, whether in one transaction or in transactions that appear linked, such as activity within a single logged-on period.

The first time, the process can be invisible. Operators routinely verify against credit reference agencies and the electoral roll, needing no documents whatsoever, which is why a first deposit sometimes clears in seconds. The second time is where people notice: the same account, six months later and £1,900 further along, gets a request for a passport and a utility bill because a threshold has been crossed. The Commission's hybrid approach permits exactly that — identify at registration, defer full verification until the €2,000 trigger — and it also requires licensees to tell customers before the first deposit what documents might later be wanted.

The warning signs offshore are worth learning by shape, because the sequence gives it away. A site that asks for nothing at registration, takes deposits for weeks, and then demands documents only when a withdrawal is requested is running the check in the wrong order for its own benefit. In Britain that behaviour is specifically out of bounds: licence condition 17.1.1 says a withdrawal request must not trigger a requirement for additional information the licensee could reasonably have requested earlier. The Commission has said more than a quarter of the complaints reaching its contact centre are about identity verification, raised by people asked for documents on attempting to withdraw, and it has flagged operators using "fuzzy matching" to onboard customers on partial verification. There is a self-defeating edge to that last one: onboarding someone under a middle name rather than a forename can create a mismatch against the self-exclusion register, which is how a check intended to be quick quietly stops working.

Five Signs a Site Is Worth Trusting

The licence appears on the public register, with the domains attached

Check the licence rather than the badge. The Gambling Commission advises checking that the business holds a British licence and clicking through to the public register to see whether the site's activities and the domain names in front of you match. A logo is an image; a register entry is a record. For non-UK regimes the same test applies — the MGA publishes a list of unauthorised URLs, and Anjouan says a certificate that cannot be verified through its public register should not be relied on.

Withdrawals are not the moment the rules change

The Commission's position is that operators cannot introduce friction at withdrawal that they did not apply at deposit, and that where it has no regulatory concerns there is no valid reason to delay a payout. A functioning UK site will display deposit and bonus balances separately and allow the deposit balance to be withdrawn at any time, including while a bonus is active. If the terms reserve the operator's sole discretion to void winnings, that is a term the Commission regards as unfair under the Consumer Rights Act 2015.

Bonus terms are readable before the first deposit

From 19 January 2026 wagering requirements on bonus funds are capped at ten times, and mixed-product offers requiring two or more types of gambling are banned. Before that date operators applied up to 60 times. A UK site's offer should now be legible in a few lines: what clears the bonus, at what multiple, and by when. Significant conditions have to be transparent and prominent, and online they must be no further than one click away — so a headline offer whose real terms live three pages deep fails the test at the first hurdle.

Customer money sits somewhere identifiable

Licensed businesses must state in writing which of the three insolvency ratings applies — not protected, medium protection, or high protection — and a customer must acknowledge that disclosure before using funds to gamble, on the first deposit and after any change. An operator rated "not protected" has to remind the customer every six months, quoting the value of the funds held. Fund segregation is not a guarantee of getting money back on insolvency; it is a starting point.

There is someone to complain to who is not the operator

British licensees must offer a route to an approved alternative dispute resolution provider, free, if a complaint is unresolved after eight weeks. The approved list includes IBAS, eCOGRA, CEDR and others. IBAS's 2024-25 report records 3,721 domestic disputes with an average completion time of 20 days and full operator compliance with decisions in the consumer's favour in both 2023-24 and 2024-25. The Commission is a regulator, not an ombudsman — it cannot get anyone's money back, which is precisely why the ADR route matters.

How to Judge a Site Before Depositing

1. Find the licence number, then find it again on the regulator's own register. The point is to match the domains as well as the company; a valid licence attached to a different domain tells you nothing about the site in front of you.
2. Read the bonus terms at the point of offer, not afterwards. Check the wagering multiple, whether it applies to the bonus alone or to the deposit as well, the maximum bet allowed while wagering, and any cap on what can be cashed out. Offshore terms commonly run well past the British ten-times ceiling and sometimes cap withdrawals at a percentage of the bonus credited.
3. Check the withdrawal page before the deposit page. Look for a maximum withdrawal limit on the deposit balance. In Britain that term is prohibited; the Commission's example of a banned clause is a daily or weekly cap. Where such a clause survives in the terms, the terms were not written for a British player.
4. Set a financial limit when prompted, because the prompt is now mandatory. Since 31 October 2025 every gambling business must prompt customers to set a financial limit before a first deposit, with declining it requiring an active choice and a confirmation. It is the cheapest form of protection on the site.
5. Check the self-exclusion position before anything else if it is relevant. A GamStop exclusion lasts for its full term — six months, one year, five years or five years with auto-renewal — and stays in place after that term ends until the person contacts GamStop to remove it. No offshore site changes that, and the Commission warned in January 2025 about unlicensed sites specifically targeting people who have self-excluded.
6. Decide what happens if it goes wrong, before it goes wrong. Confirm the ADR provider named in the terms, keep deposit and withdrawal records, and know that an eight-week unresolved complaint is the trigger for going to them.

Blocking, Cards and the Small Print of Payment

Two clusters of questions here are about restriction rather than access: how to block non-UK gambling sites, and what gambling sites accept credit cards in the UK. The second has a short answer. Credit cards have been banned for gambling since 14 April 2020, under licence condition 6.1.2, covering online betting, online casino and bingo and lotteries accepting online or telephone payments, with operators also obliged to check that money arriving from an e-wallet was not loaded from a credit card. The narrow exception is a non-remote lottery operating licence — a ticket bought in a shop or by post.

PayPal remains a familiar request, and its position is a matter of which side of the transaction you sit on. Paying a merchant from a wallet is generally free at the wallet end; withdrawing a PayPal balance to a UK bank account costs nothing where no currency conversion is involved, while a withdrawal to a US bank account is charged at 3 per cent and a failed transfer because of wrong details attracts a 0.50 GBP bank return fee. In Britain the acceptance question is governed by licence condition 5.1.2, effective 31 January 2024, which requires payment methods to be provided by a payment service provider under the Payment Services Regulations 2017.

Bank blocking is the most underrated tool in this area and the Commission maintains the list: Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling. These work by declining payments to merchants categorised under gambling merchant codes, covering online casinos, betting sites, gaming apps and physical venues, and they are applied at card level, so each card must be switched on individually. Most banks use a 48- or 72-hour cooling-off period before gambling transactions are allowed again, and the blocks do not touch a credit score. For anyone trying to put distance between themselves and an unlicensed site, this is the mechanism that does not care where the operator is registered.

Blocking software is the second layer. GamStop signposts Gamban and BetBlocker; BetBlocker states it blocks over 1,368,000 gambling websites and 3,100 apps, requires no registration and is free worldwide. Gamban blocks licensed and unlicensed sites and is designed to be as difficult to remove as possible, though its free UK licence scheme, TalkBanStop, ended on 31 March 2026 — it remains free for residents of Wales and costs £4.99 a month or £29.99 a year in England and Scotland after a 7-day trial.

What the Numbers Say About Who Is Actually There

Scale is where the trade bodies and the regulator part company, and it is worth seeing how wide the disagreement is. Market-intelligence firm H2 Gambling Capital estimates £16.6 billion was staked with illegal operators in the UK in 2025, up from about £5 billion in 2019, with the proportion of gambling happening legally falling from 97 per cent to 92 per cent. A Frontier Economics study for the Betting and Gaming Council put online black-market stakes at £2.7 billion a year, 2.1 per cent of the £128 billion staked with regulated remote operators, involving 1.5 million Brits. Yield Sec, analysing for the Campaign for Fairer Gambling, put the GB online market at £8.8 billion GGR in 2025, split 91 per cent regulated and 9 per cent unregulated.

The Commission's own consumer survey, published 5 November 2026, lands somewhere else entirely. Across the whole population including non-gamblers, it estimates 0.6 per cent engaged with an illegal gambling website in the past four weeks and a further 0.4 per cent in the past 12 months, while 94.4 per cent showed no indication of using one. Among respondents who had gambled online in the past four weeks, the estimate is 2.5 per cent, with another 1.5 per cent in the past year.

I know which set of numbers I trust more, and it is the one collected by asking people rather than the one extrapolated from stakes, though the survey has its own problem: it cannot see activity hidden behind a VPN, which the Commission's own methodology admits. Its dashboard counted 586 illegal gambling websites accessible to GB consumers in September 2026, and 311 sites faced disruption action in the second quarter of 2026-27, with 77 per cent of disrupted sites showing a reduction in estimated traffic.

Meanwhile the licensed market these sites are competing against is not small. Total British gross gambling yield was £17.5 billion in the year to March 2026, up 4.4 per cent, with the remote casino, betting and bingo sector at £8.3 billion. Online slots alone generated £773 million in the first quarter of 2026 on 25.1 billion spins. The £2 stake limit for 18- to 24-year-olds and the £5 limit for everyone else, both live since 2025, have not stopped the spin count rising.

Bonus Terms That Build In Delay

The single most reliable tell of an operator that will be difficult is not its licence but the lag designed into its paperwork. The British version of delay has been legislated away piece by piece. Reverse withdrawals — the option to cancel a withdrawal request and put the money back into play — were banned for all remote operators on 31 October 2021 under requirement 14B. Since 19 January 2026 wagering is capped at ten times, and mixed-product promotions are banned. A £900,000 regulatory settlement announced on 21 October 2026 included a term letting customers request only one withdrawal at a time, found unfair under the Consumer Rights Act 2015, and manual reviews of every fifth or tenth withdrawal that required extra information before payouts were processed.

Offshore, the delays are structural and perfectly legal. Wagering multipliers commonly run at 25 to 40 times, and higher on no-deposit offers, against a British ceiling of ten. Maximum cashout clauses cap what can be taken from bonus winnings — one operator's terms limit it to 300 per cent of the bonus credited, with the excess voided. Maximum bet rules apply during wagering, one site capping at 20 per cent of the deposit per wager and warning that breach "may result in account closure, forfeit of the Bonus, and any winnings generated". And no-deposit bonuses that cannot run consecutively, because redeeming two in a row can void subsequent winnings.

The British withdrawal record, for contrast, is unambiguously fast. Commission data covering June to September 2024 records 44.2 million withdrawals by customers of large online operators, of which 96.3 per cent cleared automatically, 3.5 per cent within 24 hours and 0.1 per cent within up to 48 hours. Withdrawal complaints coded to the Commission's contact centre fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025. Delays still lead the complaint tables — they always do — but the direction of travel is one way.

What the Papers Say and What the Record Shows

Governments do not usually advertise their own failure to prosecute, and the numbers here are not flattering to anyone. One prosecution commenced across a full twelve months of enforcement, while 447,778 URLs were referred to two search engines. The Illegal Gambling Taskforce's terms of reference, published by DCMS on 13 May 2026, set three priorities — reducing payments to and from illegal operators, tackling online advertising of illegal gambling, and improving cross-agency enforcement — for a twelve-month run. That is an admission that the current mix is not working as well as it should.

The other end of the machinery is quieter and, in my view, more effective. The Commission made its first referral to Visa in January 2025 after a test purchase on an unlicensed site, and has made three since, covering three more sites. Three referrals in two years is not a strategy yet. But when the Commission's own analysts say GEO IP blocking and registrar blocks beat search-engine removal, and the payment channel is the one that takes the money out of the equation entirely, the direction is clear enough. Following the money beats hiding the door.

None of which changes the position of anyone reading a page like this with a problem that has already happened. The Commission cannot recover money; it can record a complaint and refer a dispute to an independent third party. Beyond that sit GamCare, Gordon Moody and Gamblers Anonymous, and Citizens Advice for the debt that tends to follow. The National Gambling Helpline, 0808 8020 133, is free and answers 24 hours a day, and in Wales 0808 2819 265 is the number given.

Questions About Gambling Sites UK

How many online gambling sites are there in the UK?

There is no published total, and the figures usually quoted are estimates rather than counts. The Commission's own dashboard identified 586 illegal gambling websites accessible to GB consumers in September 2026 alone, a figure that moves quarterly as domains are registered and blocked. For licensed operators, the Commission's public register is the authoritative list — clicking through it to match a licence against specific domain names is the only check that answers the question for one site.

Are new gambling sites in the UK safer than older ones?

Not inherently, and the launch period is when terms are least tested. What matters is the licence behind the site rather than its age, since every British licensee carries the same conditions on identity verification, bonus terms, withdrawal limits and self-exclusion from the first day of trading. A new site's bonus terms deserve particular scrutiny, because the ten-times wagering cap is a ceiling, not a standard, and offers are frequently built to sit at it.

What are the best gambling sites UK players can actually verify?

The verifiable test is mechanical rather than a matter of taste: the operator appears on the Commission's public register with the domain being used; its terms disclose an insolvency rating for customer funds; it names an approved ADR provider; and there is no maximum withdrawal limit on the deposit balance. A site passing all four is offering the standard British package. Anything outside that list is comparing brands, which is not the same as comparing protections.

Why do UK gambling sites ask for documents when I withdraw?

Because identity verification under licence condition 17 must be completed before gambling, and the anti-money-laundering threshold of €2,000 in deposits or withdrawals can be crossed later in an account's life than it was at registration. The nuisance case is an operator that could have asked earlier and waited. Licence condition 17.1.1 prohibits making a withdrawal request the trigger for information the licensee could reasonably have requested sooner.

What gambling sites accept credit cards in the UK?

None for licensed gambling. The credit card ban has applied since 14 April 2020 under licence condition 6.1.2, covering online betting, online casino and bingo, and lotteries accepting online or telephone payments. Operators must also check that e-wallet funding did not originate from a credit card. The exception is narrow: a non-remote lottery operating licence, so a ticket or scratchcard bought in a shop or by post.

Are gambling sites not on GamStop legal in the UK?

A site that takes British customers without a Commission licence is operating unlawfully, whoever it is licensed by elsewhere, and the offence under section 33 of the Gambling Act 2005 is the operator's rather than the customer's. The Gambling Commission has stated plainly that offering commercial gambling services to consumers in Great Britain without a Commission licence is illegal, including where the operator holds a licence in another jurisdiction.

What happens to a GamStop exclusion when the term ends?

It stays in place. An exclusion runs for its full term — six months, one year, five years or five years with auto-renewal — and remains after that period ends until the person contacts GamStop to remove it. The auto-renewal option may only be switched off during the last six months of a five-year minimum period. Registrations cannot be removed early, and an offshore site does not lift any of it.

The Regulator Chases the Money, Not the Domain

The British instinct on unlicensed gambling sites is to remove them from view, and the record shows how limited that is: 287,961 URLs taken out of search results since April 2024, an average 32 per cent fall in engagement across 160 sites, and one prosecution commenced in a full year. The Commission knows which levers work — registrar blocks and suspensions averaging a 91 per cent fall in engagement each, GEO IP blocking 60 per cent, Google removal 30 per cent, Facebook removal 8 per cent — and it has now begun pulling the one that empties the till, with four referrals to Visa since January 2025. Licence fees are not much of a deterrent when an Anjouan licence renews at €17,828 a year and covers more than a thousand operators; a payment processor that stops answering is.