Gambling Not on GamStop: The Sites, the Apps and the Licence Gap

Updated November 2026

Licensed

Available in GB

Fast payouts

18+ Only

Gambling not on GamStop means a casino or app that holds no Great Britain licence from the Gambling Commission, so it cannot be part of the national self-exclusion scheme. Registers are checked only against licensed operators. Offshore sites are legal where they are based, not here, and none of the UK’s protections follows a player across that line.

The scheme’s name causes half the confusion. It is written GamStop, but the word “game” suggests itself and it is very often typed “gamestop” — a slip that, like most slips, changes nothing about what the thing does.

What follows is about phones and apps, because that is where the market has moved. The Gambling Commission’s operator data for January to March 2026 puts average monthly active online accounts at 13.4 million, with 26.8 billion bets and spins in the quarter — a volume that no browser-and-desktop era ever produced. A player tapping through four screens on a train is not reading a terms page. That is precisely how the difference between a licensed site and an unlicensed one gets lost.

The distinction that matters is not aesthetic. It is legal, and it is boringly practical. A Great Britain licence imposes rules on the operator: checks on the customer, a ten-times cap on bonus wagering from 19 January 2026, no reverse withdrawals, funds kept in a separate client account. An offshore licence imposes different rules, often fewer, sometimes none that anyone enforces. Both kinds of site will look polished on a handset. Only one of them answers to a regulator that has suspended licences over a missed integration deadline before — which it did, twice, on 3 April 2020.

I have no interest in pretending this is a simple story of safe and unsafe. It is a story about what a licence actually buys, and who is holding the receipt.

What a Gambling Commission Licence Actually Covers

The licence is not a badge of quality. It is a set of obligations with a register behind them, and the register is the only part a player can check in ten seconds.

Three of those obligations do the heavy lifting. The first is the self-exclusion duty: since 31 March 2020, every online operator must be part of GAMSTOP as a condition of its licence, sitting in the Commission’s Licence Conditions and Codes of Practice at social responsibility code 3.5.5, which requires licensees to “participate in the national multi-operator self-exclusion scheme”. In April 2020 the Commission added a requirement to check the entire customer base against the register at least every 24 hours.

The second is the identity duty. Licence Condition 17 has required operators to verify a customer’s name, address and date of birth before permitting them to gamble since 7 May 2019. The third is the money duty: from 14 April 2020 credit cards cannot be used for gambling, and customer funds sit in a separate client account rather than the operator’s own.

None of that travels. A site with a Curaçao or Anjouan licence has no obligation to check a British register, and the great majority do not. This is not a loophole in the scheme; it is the edge of the scheme. GamStop blocks access to gambling websites and apps licensed in Great Britain only, and states that it is unable to prevent access to services run by organisations that do not participate in it.

The Commission has said the quiet part aloud. In an industry warning notice on 20 January 2025 it noted that unlicensed sites available to British consumers often target people who have self-excluded through GAMSTOP, and may have inadequate social responsibility and anti-money-laundering controls.

The Payout Benchmark, and Why It Comes From the Commission

The one number I would put on the wall is this: of 44.2 million withdrawals by customers of large online operators between June and September 2024, 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours and 0.1 per cent took up to 48 hours.

That is the Commission’s own dataset, and it sets the bar against which every “instant payout” claim should be read. It also explains why the phrase is so durable in marketing: on a licensed site, automatic clearance is the norm, so promising speed is promising nothing unusual. What the figure does not say is whether a given offshore site pays at all, or in what order of weeks. I am not neutral about this. A payout table with no regulator behind it is a marketing document, not a benchmark.

The complaints data adds the other half. Withdrawal problems have been the single biggest subject of consumer complaints to the Commission’s contact centre for years — around 2,000 a year by July 2024, and its Annual Report and Accounts 2024-25 still recorded withdrawals as the cause of most complaints received. Complaints coded “Withdrawals and/or financial transactions” did fall, from 2,416 in the year to December 2022 to 1,791 in the year to December 2025. Falling complaints on licensed sites, rising promises on unlicensed ones. Make of that what you like.

Delay Built Into the Terms

Two habits are worth naming because they are legal in most offshore regimes and banned here.

The first is the staged release. Some operators process only one withdrawal at a time and refuse a second until the first is authorised — a term the Commission found unfair under the Consumer Rights Act 2015 when it settled with an operator in October 2026, alongside manual review of every fifth or tenth withdrawal for some customers. The second is the maximum cashout clause: one offshore casino’s published terms limit winnings generated with bonus funds to 300 per cent of the credited bonus, voiding the excess. A deposit balance limit like that is prohibited on a British licence.

Neither term is hidden, exactly. Both are in a terms page reachable from the app in one tap. Which is the point: it is reachable, and almost nobody reaches.

Gambling Not on GamStop and identity checks

If a single mechanism decides whether an unlicensed site is worth the trouble, it is the identity check — when it happens, and what happens to the money in the meantime.

On a British-licensed site the modern expectation is that checks come early. The Commission’s guidance is blunt that onboarding on initials instead of full names, nicknames, or a commercial address instead of a residential one is not enough, and that identity and age checks should be brought forward to before a deposit or a stake. Electronic verification through credit reference data or the electoral roll often clears a customer without a single document. Where documents are needed, Licence Condition 17.1.1 says a withdrawal request must not trigger a request for information the operator could reasonably have made earlier — unless another legal duty, anti-money-laundering rules included, requires it at that moment.

A hybrid approach is permitted: identify at registration, verify age, and defer full verification until the €2,000 threshold in the 2017 Money Laundering Regulations is reached. Money staked in an open bet is not customer funds; unstaked deposits remain the customer’s property, and a licence does not allow an operator to confiscate a deposit because identity was never verified.

How It Goes the First Time, and Later

The first time, a licensed operator is likely to decide before the first spin. Later, on a second or third account, the data already exists, and checks are near-invisible — a match against a database, a score, a green tick. That is why the experience of verification varies so wildly between people and between sites, and why the Commission says it cannot give a timescale for identity checks at all, because the process varies.

Offshore, the order often reverses. Registration is quick because nothing is checked, the account is funded, the game runs — and the request for a passport, a utility bill and a selfie arrives at the withdrawal screen, when the money is already in play.

That is not merely annoying. It is the warning sign. Over a quarter of complaints reaching the Commission’s contact centre concern identity verification, and it is among the commonest dispute types going to adjudicators — a pattern that exists because friction at the cashier is where commercial interest and player interest point in opposite directions. The Commission has said plainly that introducing friction at withdrawal rather than at deposit is not acceptable, and that where it has no regulatory concerns about a customer there is no valid reason to delay a payout.

A second warning sign is a terms page that reserves sole discretion — “we may void winnings at our discretion”. The Commission’s guidance says such terms are unfair within the meaning of the Consumer Rights Act 2015. Where they appear, the identity check is not a compliance step; it is a lever.

And the third is subtler. The Commission’s 2026 risk assessment notes a rise in attempts to bypass checks with false documents, deepfakes and AI face swaps, and warns that “fuzzy matching” by third-party verifiers can onboard a customer on partial verification. A sloppy check cuts both ways: it lets a bad actor in, and it lets a genuine player’s account be frozen later on the strength of a mismatched middle name.

What the Five-Year Term Really Means

Self-exclusion is not a switch. Under GamStop’s own terms, a registration lasts 6 months, 1 year, 5 years, or 5 years with auto-renewal; it cannot be cancelled or deactivated during the exclusion period; and it stays in place after the chosen period ends unless the person contacts GamStop to remove it. That is the whole of it, and it applies wherever the topic comes up.

The figures say people are choosing the long end. Of periods selected by registrants in 2025, 29 per cent chose 6 months, 24 per cent a year, 25 per cent five years and 22 per cent auto-renewal. As of July 2026 the register held 614,738 people, more than one in two of them on the maximum five-year term, and only one in four across all age groups on six months.

Registration takes minutes and the block can take up to 24 hours to bite. Under the terms of use, auto-renewal can only be switched off in the final six months of a five-year period, and it runs for up to four further five-year periods. If nothing is done at the end of it, GamStop holds the data through a further automatic seven-year self-exclusion period during which operators are told the person was previously excluded. Registrations are not removed early; the Group’s 2025 annual report devotes a section to refusing exactly that.

This is the point on which the whole “not on GamStop” market rests, and it is the point at which I part company with the framing. A site outside the scheme is not an exit from an exclusion. It is a site that has no way of knowing an exclusion exists, and no duty to ask. Presenting it as an alternative is a category error dressed up as choice.

Gambling sites not on GamStop and five signs of trust

Trust in this market is not a feeling. It is a short list of things that can be checked, in order, in about five minutes.

A Licence That Can Be Verified, Not Just Displayed

A site carrying a Curaçao seal should be checked before anything else. The Curaçao Gaming Authority issues two separate seals: a Certificate of Operation Seal, issued only to B2C operators and only for an approved, registered player-facing domain, and a License Certificate Seal, available to B2B and B2C entities and not tied to a domain. Clicking a Certificate of Operation Seal must redirect to cert.cga.cw; if the seal differs in design, colour or format, the site is not authorised. If the certificate behind the seal displays a different domain from the one being used, the site is showing another operator’s certificate.

The quick check: click the seal, read the domain behind it, and note whether it matches. A pasted image does nothing.

A Regulator That Actually Licenses and Supervises

Jurisdictions differ in kind, not degree. Curaçao replaced its old master-licence model with direct licensing under the National Ordinance on Games of Chance, in force from 24 December 2024; legacy orange sub-licence certificates ended on 15 October 2025 and a historic /JAZ number is not proof of a current licence. Anjouan issues B2C and B2B internet gaming licences with no territorial restrictions under its own law, but its own statement of 10 June 2026 concedes that no licensing authority can exempt an operator from local law where local authorisation is required. Kahnawà:ke has regulated interactive gaming since 1999 and publishes a Logo Certificate Program that generates a Certificate of Good Standing when clicked.

The quick check: is the authority named on the site the one that actually licenses it today, and can the certificate be verified through a public register rather than admired?

A Payout Record You Can Trace to Rules, Not Slogans

On a British licence, an operator may not impose a maximum limit on what can be withdrawn from a deposit balance, may not confiscate funds over inactivity, and may not ban reverse withdrawals — that prohibition, RTS 14B, has been in force since 31 October 2021. Offshore, none of it applies as a matter of course.

The quick check: read the withdrawal section of the terms before depositing, and count how many caps, review thresholds and manual-approval triggers appear. Payout speed is a claim; payout terms are a document.

A Complaints Route With a Name

An independent dispute body that will take a case is the difference between a complaint and a shrug. Anjouan requires licensees to designate an approved ADR provider and to publish its details; the approved list currently includes EGIS ADR, Axion ADR, iGaming ADR and other approved dispute bodies. On the British side, approved providers include IBAS, eCOGRA, CEDR, ProMediate, ADR Group, Pegasus ADR Service, Blexr and the Tattersalls Committee. Note what sits in the gap: the Commission itself is a regulator, not an ombudsman, and cannot resolve individual disputes.

The quick check: find the named provider in the terms, then check it will take a complaint about the site in question and in what language.

Terms Written in Plain Numbers

A serious operator states its wagering multiple, its maximum bet during wagering, its cashout cap and the time limit in figures. A careless one links to a bonus page and leaves the arithmetic to the player.

The quick check: find the wagering multiple on the offer itself, without clicking. If it is not there, that is the answer.

Comparing setups for gambling sites not on GamStop

The comparison below is by licence, because the licence is what changes the rules. The British column is the standard; the others are described against it. Figures are the published fee levels and requirements of each authority, not the marketing of any site.

Two rows deserve a second look. On cost, the Anjouan annual fee is EUR 17,828 and the Curaçao total is EUR 47,450 — the gap between the cheapest offshore licence and the British route is not, in corporate terms, enormous, which is a reminder that the choice is usually about regulatory burden rather than the price of the paperwork. On disputes, Kahnawà:ke is the outlier: it obliges a licensee’s relationship with players to be contractual and charges its Dispute Resolution Officer with hearing them, and it treats its own voluntary self-exclusion as permanent and irrevocable — with the striking rule that a player who breaches a self-exclusion prohibition forfeits funds deposited or won to a charity chosen by the Commission.

The United Kingdom itself is not a small market to walk away from. Total Great Britain gross gambling yield was £17.5 billion in the year to March 2026, with remote casino, betting and bingo at £8.3 billion. Estimates of the unlicensed share vary enormously by method — from 2.1 per cent of stakes in an industry-commissioned study to 9 per cent of gross gaming revenue in a campaign group’s analysis. Anyone quoting a single confident figure for the black market is quoting a methodology.

The specific risks of mobile gambling apps

A desktop site invites reading; an app invites tapping. Every risk in this article is worse in an app, for structural reasons.

An app pushes notifications, remembers a card and reduces the distance between an intention and a deposit to one thumb movement. A web page can be bookmarked and closed; an app sits on the home screen. And an app is the natural home for the terms no one opens.

The pattern shows in who registers with GamStop. Under-25s accounted for nearly one in three of all self-exclusions in the first half of 2026, a 26 per cent year-on-year increase, and the register as a whole grew 16 per cent year on year in that half, with May 2026 setting a monthly record of 12,236 sign-ups. The 2025 annual report recorded the gender split as 94.3 per cent male and 5.7 per cent female. People are not stumbling into these decisions; they are making them, in numbers, from a phone.

Blocking software is the practical answer for the handset, and GamStop signposts Gamban and BetBlocker for phones, tablets and computers. BetBlocker states it blocks over 1,368,000 gambling websites and 3,100 apps, needs no registration and is free worldwide. Gamban blocks licensed and unlicensed sites and designs its protection to be as hard to remove as possible, but the free UK licence scheme ended on 31 March 2026: it is free for residents of Wales, while in England and Scotland it costs £4.99 a month or £29.99 a year after a 7-day trial. Bank blocks are the second layer, applied at card level and so needed on every card — most banks impose a 48- or 72-hour cooling-off period before gambling payments resume, and the blocks do not touch a credit score.

A Six-Step Check Before Depositing on a Phone

The order matters more than the steps, because each one is cheap and the last one is not.

1. Check the licence on the Gambling Commission’s public register, and check the domain. The Commission advises clicking through to the register to see whether the site’s activities and domain names match. Reason: an offshore licence is not a British one, and the register is the only place that distinction is visible without a lawyer.
2. Click the licence seal and read where it goes and whose domain it names. A Curaçao Certificate of Operation Seal must redirect to cert.cga.cw and must carry the domain in use. Reason: a copied seal is the commonest piece of theatre in this market.
3. Read the withdrawal section of the terms before the bonus section. Look for caps on withdrawal, one-at-a-time rules, manual review triggers and any maximum cashout on bonus winnings. Reason: these are the clauses that decide how the money leaves, and they are legal offshore.
4. Find the named dispute body and its language. Anjouan’s approved providers work in specific jurisdictions; IBAS and eCOGRA take consumer complaints free of charge in English. Reason: a complaint with nowhere to go is not a complaint.
5. Look at the identity-check timing. If verification is deferred until withdrawal, expect it at the cashier, not at the door. Reason: the Commission says a licence duty applies to information the operator could reasonably have requested earlier, and offshore there is no such duty.
6. Install a blocking tool and switch on the bank block before the first deposit, not after. Reason: both are cheap now and awkward later, and the cooling-off period on a bank block runs in the wrong direction when the intention to stop arrives at 2am.

Where the Help Actually Is

Help is free for anyone feeling cornered by gambling. The National Gambling Helpline is operated by GamCare on 0808 8020 133, 24 hours a day, every day of the year, also reachable by live chat and WhatsApp; callers in Wales are given 0808 2819 265. BeGambleAware, the public-facing brand of the charity GambleAware, points to the same number and an online chat.

Beyond the line: Gamblers Anonymous England, Wales & Ulster on 0330 094 0322 runs around 250 meeting locations with no appointment needed; GamFam, a registered charity, runs a five-stage peer-support programme for families; Gam-Anon UK & Ireland supports the friends and family of compulsive gamblers regardless of whether the gambler attends. The NHS National Gambling Clinic at 69 Warwick Road, London takes self-referrals for 13- to 18-year-olds anywhere in England and for adults in Greater London and the South East, alongside 15 specialist clinics opened across England since 2019 and 8 regional services commissioned by integrated care boards. Citizens Advice offers free, confidential help with debt, and Citizens Advice Scotland runs a gambling support line on 0800 328 1131, weekdays from 10am to 3pm.

The treatment system behind all of it is now paid for by the statutory levy, which commenced on 6 April 2025, charged online operators 1.1 per cent of prior-year gross gambling yield, and raised just under £120 million in its first year — ringfenced solely for research, prevention and treatment. Since 1 April 2026 NHS England has commissioned gambling-harms treatment in England against roughly £100 million a year. It is the trade paying, which is the one arrangement in this field I have never heard anybody argue against.

FAQ

What gambling sites are not on GamStop?

Any operator without a Great Britain licence from the Gambling Commission. The licensing duty sits in social responsibility code 3.5.5 and applies only to licensees, so an offshore site — typically Curaçao, Anjouan or Kahnawà:ke — has no obligation to join the scheme. A handful comply anyway; most do not, and none can be forced to.

Are UK gambling sites not on GamStop legal to use?

The Gambling Commission says it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence, including an operator licensed elsewhere. That offence under section 33 of the Gambling Act 2005 attaches to the provider, not the player. The practical consequence for a customer is simpler and harsher: no British regulator, and no British protection.

Is it the best gambling sites not on GamStop, or just the ones that advertise hardest?

Advertising effort and reliability are close to unrelated. The visible ones buy affiliate placements; the figures that matter sit in the licence, the terms and the dispute route. Compare the annual fee a regulator charges — EUR 47,450 in Curaçao, EUR 17,828 in Anjouan — and remember that neither authority requires a check against the British self-exclusion register.

Do gambling companies not on GamStop ever check the register anyway?

Some do it voluntarily, and Kahnawà:ke runs its own self-exclusion scheme, so a licence there is not automatically a free pass. But there is no duty, no daily check requirement and no penalty for missing one. The British rule — licence holders must participate, and since April 2020 must screen their entire customer base at least every 24 hours — has no offshore equivalent.

Can I just register with GamStop and use offshore sites anyway?

The registration still holds: it lasts for its full term and then stays in place until the person contacts GamStop to remove it. It blocks licensed operators, and an offshore site simply never sees it. Treating an unlicensed casino as a way round an exclusion misunderstands what the exclusion is, and the Commission’s January 2025 warning notice says plainly that such sites often target precisely those customers.

Are welsh gambling sites not on GamStop any different?

No. Licensing is a Great Britain matter, so the same operator, the same terms and the same absence of protection apply in Wales, Scotland and England. What does differ is the support: callers in Wales are given 0808 2819 265 for the helpline, Gamban is free for Welsh residents, and Citizens Advice Scotland runs a separate advice line on 0800 328 1131.

The Short Version

An unlicensed casino is not a better casino; it is the same casino with the safety rails taken off and the terms left inside the machine. The licence is not a certificate of virtue, but it is the thing that makes a self-exclusion meaningful, a withdrawal term unfair-and-therefore-voidable, and a ten-times wagering cap binding — and since 19 January 2026 that cap is exactly what a British licensee must apply, down from extremes the Commission said reached 60 times. Offshore, the arithmetic is the operator’s to set. The register that 614,738 people were on as of July 2026 is checked by operators who are required to check it, and that is the whole of the promise.

Content created by the «Quick Withdrawal» team