Casinos Without GamStop and What the Regulator Does About Sites Outside the Scheme

Casinos without GamStop are offshore sites holding no Gambling Commission licence, so they sit outside the national self-exclusion scheme. A GamStop registration cannot be removed by opening an account abroad: the block holds for its full term and stays until the person contacts GamStop. UK licences are separate from foreign ones, and fighting them is a standing job with paperwork attached.

The Promise, the Numbers and the Gap Between Them

The selling point of a casino without GamStop is rarely stated that plainly. It is dressed as freedom: no scheme looking over your shoulder, no registration to slow anyone down. The word "GamStop" is often typed "gamestop", one word run together, which tells you how casually the name sits in the British keyboard muscle memory. The scheme's own scale is worth holding up against the pitch. Gamstop reported 614,738 consumers on the register as of July 2026, and more than one in two of them had chosen the maximum five-year exclusion. A market pitched at people excluded from that register is not a small niche; it is a queue.

Then there is the size of the thing relative to the licensed market. The Gambling Commission's figures put Great Britain's total gross gambling yield at £17.5 billion for April 2025 to March 2026, with remote casino, betting and bingo worth £8.3 billion of it. Estimates of what goes to operators without a Commission licence vary enormously depending on who is counting — an industry-commissioned study put it at £2.7 billion of annual online stakes, while a market-intelligence firm put staked value with illegal operators at £16.6 billion in 2025. That spread should make anyone nervous about the more dramatic figures. What is not in doubt is the direction of the Commission's own effort, and the numbers there are large: to April to September 2026 it referred 1,835 websites to search engines in a single quarter, and issued 546 cease and desist notices to illegal operators. The regulator's view of this market is not theoretical.

So the angle this column takes, and the angle worth keeping in view throughout, is what the regulator actually does about unlicensed sites — not what it says it believes, but the notices, the referrals, the blocks and the prosecutions it records.

What a Casino Without GamStop Actually Is

Strip the marketing back and there are only three things going on. First, the operator holds a licence from a jurisdiction other than Great Britain, or claims to hold one, or holds nothing that could honestly be called a licence at all. Second, because it holds no Gambling Commission licence, it has no obligation under Licence Conditions and Codes of Practice social responsibility code provision 3.5.5 to join the national multi-operator self-exclusion scheme. Third, none of the British consumer protections that attach to a Commission licence apply to it: no prohibition on withdrawing the offer of a withdrawal, no fair-and-open terms condition, no customer-funds disclosure, no requirement to send disputes to an approved alternative dispute resolution provider, no eight-week complaints clock.

That is the whole of it. Offshore sites are not licensed in Great Britain. UK protections do not apply to them. Where the operator is one of the decent offshore houses, it may well impose its own limits, publish its own dispute route and pay out promptly. Where it is not, there is no British regulator holding the other end of the rope. That distinction — decent offshore operators versus the rest — is the only useful way to read this market, and it is the distinction the rest of this piece is built on.

The Commission's own warning notice of 20 January 2025 is blunt about who unlicensed sites tend to attract: it noted that casino games supplied by licensed operators were appearing on unlicensed websites available to GB consumers, and that such sites often target people who have self-excluded through GamStop, typically with thin social responsibility and anti-money-laundering controls. Read that again and the shape of the market is clear. The pitch is aimed at a specific, identified group, and the controls around that group are the ones most likely to be missing.

The Checkable Benchmark of Regulator Disruption

If you want one number from a primary source to judge whether the British state takes this seriously, take the enforcement record rather than the rhetoric. The Commission's Illegal Markets team reported that from April 2024 onwards it issued 3,140 cease and desist and disruption notices — 2,032 cease and desist notices, 774 registrar referrals, 402 host referrals and 3 payment provider referrals — and referred 447,778 search URLs to Google and Bing, securing 287,961 removals. Across 160 illegal gambling websites for which traffic data existed, engagement fell by an average of 32 per cent after disruption activity.

The interesting part is which methods work. Measured by average fall in engagement, registrar blocks and website suspensions produced the largest reduction at 91 per cent each, ahead of GEO IP blocking at 60 per cent, Bing removal at 52 per cent, Google removal at 30 per cent and Facebook removal at 8 per cent. The Commission itself draws the conclusion: search-engine removal makes a site harder to find but does not block access. That is the honest reading of a de-listing regime, and it deserves saying plainly — a site that has been dropped from Google is still a site, still reachable by anyone who knows the address or follows a link from somewhere else.

The prosecution record is thinner. Across April 2025 to March 2026, each quarter recorded 0 or 1 prosecutions commenced, a total of one, in October to December 2025. The offence exists and is serious: section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and it is immaterial whether the facilities are provided wholly or partly by remote communication, or inside or outside the UK. On summary conviction that carries up to 51 weeks' imprisonment, a fine up to level 5 on the standard scale, or both, with six months in Scotland. A maximum of 51 weeks and a small number of prosecutions per year is the honest arithmetic of enforcement: the deterrent is the disruption, not the courtroom.

British-Licensed Sites Set the Standard — Do Offshore Ones Clear It?

The comparison only means something if the British baseline is stated first. A Commission licensee must check its entire customer base against the self-exclusion register at least every 24 hours, a requirement introduced in April 2020. It must verify identity before letting a customer gamble, must not charge into a withdrawal request with documents it could reasonably have asked for earlier, must not impose a maximum cap on what a customer may withdraw from their deposit balance, and must route unresolved disputes to an approved alternative dispute resolution provider free of charge after eight weeks. Those are not aspirations; they are licence conditions, and the Commission can and does act on them. In October 2026 an operator agreed a £900,000 regulatory settlement for failures including unnecessarily delaying withdrawals and a term allowing only one withdrawal request at a time.

Now put an offshore site beside that list and the comparison is about terms, not about tone. Some offshore houses hold themselves to a reasonable standard and publish it. Others build delay into the construction of the account itself. The table below compares the two settings by criterion rather than by brand, because that is the only comparison that generalises.

One line in that table explains most of the disputes in this market. The Commission's fair-terms guidance states that operators must not impose any maximum limit on the amount a consumer may withdraw from their deposit balance, and its example of a prohibited term is "You may withdraw up to £50 per day and up to £500 per week". Offshore, that sort of term is not a breach of anything. A cap on withdrawal, whether written as a daily ceiling or buried in a bonus clause, is the single most effective way to keep money inside an account, and it costs the operator nothing to write.

Five Signs of an Operator Worth Trusting

None of these signs is a guarantee, and a site that passes all five can still disappoint. But every one of them is checkable in a few minutes, and failure on any of them is a reason to stop rather than a reason to look for reassurance.

The Licence Is Real and It Names the Right Domain

The licence claim should name an authority and a licence number, and the number should be verifiable through that authority's own register rather than through a badge on the page. Curaçao's regulator issues two different seals: a Certificate of Operation Seal, issued only to business-to-consumer operators and only for an approved player-facing domain, and a separate Licence Certificate Seal that is not domain-specific. Clicking a Certificate of Operation Seal should redirect to the regulator's certificate site, and if the certificate behind the seal displays a different domain from the one you are on, the site is showing another operator's certificate. The Commission's advice is the same in spirit: check the public register and confirm the activities and domain names match.

The Terms Are Readable Before Any Money Moves

Wagering, maximum cashout, maximum bet while wagering and payment limits should be in the offer itself, not three clicks into a general terms page. The sharpest version of this test: find the maximum cashout clause before depositing, not after winning. If it is absent, or expressed as a percentage of the bonus rather than a number, treat that as the answer.

Withdrawals Are Not Gated by Documents the Site Could Have Asked For Earlier

A properly run site asks for identity documents at onboarding, tells you what may be needed and in what form, and does not discover a need for a passport scan the moment a withdrawal is requested. That sequencing is not a courtesy; under British rules it is a licence condition. Offshore, the same trick — holding a payout while documents are gathered — is a common and entirely lawful way to slow money down, so look at when the verification request arrives relative to the deposit.

Complaints Go Somewhere Real

A trustworthy offshore operator will name a dispute route: an ADR provider, an authority that accepts player complaints, or at minimum a complaints procedure with a clock attached. Anjouan requires its licensees to designate an approved ADR provider and to list it in player-facing terms, with operators expected to resolve complaints within 30 days before escalation; the approved providers are named on the regulator's site. Kahnawà:ke requires its permit holders to let a player set limits including zero, and employs a full-time dispute resolution officer. A site that names nobody, and whose only escalation route is its own support inbox, has told you what its terms are worth.

The Authority Has Not Declared the Domain Unauthorised

This is the check almost nobody runs, and it is the fastest one. The Malta Gaming Authority publishes a list of unauthorised URLs on which it states it has no connection with those domains and that any reference to the MGA or a Maltese licence on them is false and misleading. The Curaçao authority is building an alternative verification mechanism because its old digital seal was affected by a portal transition. Anjouan states that certificates which cannot be verified through its public register should not be relied on as evidence of licensing status. Checking the authority's own announcements takes two minutes and beats reading a badge.

Six Steps to Assess an Offshore Operator

1. Read the brief under the license. Ask what type of licence it is and what that type actually permits.

Knowing whether the operator holds a business-to-consumer licence or a supplier licence changes everything: Curaçao, for instance, does not allow a single company to hold both a business-to-business and a business-to-consumer licence. A site that cannot state its own licence category has not been examined by anyone who matters.

1. Verify the licence number at the regulator, not at a link the site provides. Follow the authority's own register.

Certificate verification frameworks exist precisely so that the claim can be tested independently. Anjouan's certificates carry a unique licence number and a QR code linking to a public register. If the number does not appear there, the badge on the page is decoration.

1. Read the bonus terms as arithmetic before reading them as an offer. Multiply the wagering figure by the bonus, then find the maximum cashout.

A 40× requirement on a £100 bonus means £4,000 of play before anything derived from it is withdrawable, and a cashout cap can make the exercise pointless even after that. British licensees have been capped at ten times since 19 January 2026; offshore sites are not bound by that, and trade comparisons commonly put their welcome offers between 25× and 50×.

1. Find the deposit and withdrawal terms in full, including anything that limits a payout. Look for daily or weekly ceilings.

British rules prohibit a cap on withdrawing the deposit balance, but offshore that prohibition does not run. A per-day ceiling is the most effective retention tool in the trade and the easiest to miss, because it sits in a payment section rather than a bonus section.

1. Check the eventual withdrawal route and its cost. Card, bank transfer, e-wallet and cryptocurrency each behave differently.

Payment method matters more offshore than onshore, because the operator chooses which ones it offers and what it charges. Where a card payout is used, Visa's own Fast Funds service is described as processing in real time with funds available within 30 minutes of approval, while a standard bank transfer is slower. Where an e-wallet sits in the middle, the wallet's own fee applies on top: withdrawals from a Skrill account to a bank account are charged at 2.80 per cent of the amount withdrawn, with a minimum of EUR 3.50. None of that is unreasonable — but all of it has to be counted before, not after.

1. Write the escalation route down before you need it. Name the regulator or ADR body and check it accepts player complaints.

The Gambling Commission is a regulator and not an ombudsman, so it cannot resolve an individual dispute or get anyone's money back. It records complaints and refers disputes elsewhere. Offshore, the equivalent body is a foreign authority whose remit may not extend to a British consumer at all. If the escalation route written on the site leads to an inbox with no clock and no decision, the terms are being enforced by nobody.

Where Self-Exclusion Sits in All of This

Self-exclusion is the one part of this subject where the facts are flat and the marketing is dishonest, so it is worth stating exactly. Registering with Gamstop Online blocks a person from gambling with all online gambling companies licensed in Great Britain for six months, one year, five years, or five years with auto-renewal. Signing up takes minutes; the block can take up to 24 hours to become effective. Once registered, the registration cannot be cancelled or deactivated during the exclusion period, and the exclusion stays in place after the chosen period ends unless the person contacts GamStop to remove it. Under the scheme's terms, the auto-renewal option may only be switched off during the last six months of a five-year minimum exclusion period, and if no deactivation happens, GamStop holds the data through a further automatic seven-year period during which operators are told the person was previously excluded. The Group's 2025 annual report devotes a section to its refusal to remove registrations early. That is not a bug in the scheme. It is the scheme.

An offshore site does not change any of this, because the exclusion attaches to the person and to British-licensed operators, not to the internet. What an unlicensed site offers is not a way round the exclusion; it is an account with an operator that has no duty to check the register at all. The distinction is worth holding firmly: the exclusion still stands, exactly as written, for its full term.

There is a British-provider pattern worth knowing here, since it explains part of why offshore sites exist. Land-based self-exclusion runs on separate schemes: SENSE covers licensed land-based casinos with a minimum six-month exclusion extendable to twelve months, and removal can only be requested in person at a casino during the six-month "Thinking" period that follows. Gamstop Betting Shops, previously known as MOSES, is telephone-based and excludes a customer from named bookmakers' shops for a fixed twelve-month term that cannot be ended early. Three schemes, three different sets of mechanics, and none of them transferable. The online scheme's five-year option exists because the operators asked for a long lock. The register held 614,738 people as of July 2026, and the growth is not slowing: the Commission-side reporting for the first half of 2026 showed a 16 per cent year-on-year increase in registrations, with May 2026 setting a monthly record of 12,236 sign-ups. Under-25s accounted for nearly one in three of those exclusions, a 26 per cent year-on-year rise.

If help is needed, it exists and it is free. The National Gambling Helpline, run by GamCare, is available on 0808 8020 133, 24 hours a day, every day of the year, by phone, live chat and WhatsApp. For callers in Wales, the helpline number given is 0808 2819 265. BeGambleAware, the public-facing brand of the charity GambleAware, directs people to the same helpline or its online chat. Around 250 Gamblers Anonymous meeting locations run across England, Wales and Northern Ireland with no appointment needed. The NHS National Gambling Clinic in London accepts referrals, including self-referrals, and NHS England has opened 15 specialist gambling clinics across England since 2019. Blocking software adds a layer that a site cannot argue with: GamStop signposts Gamban and BetBlocker, and BetBlocker states it blocks over 1,368,000 gambling websites and 3,100 apps and is free worldwide; Gamban states it blocks licensed and unlicensed sites alike. Bank-level blocks are also worth knowing about — the Commission's list of banks offering a gambling blocking service names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling, and most use a 48-hour or 72-hour cooling-off period before gambling transactions are allowed again.

Fees, Payments and the Small Print That Costs Money

Payment method deserves its own reckoning, because the fee structure of an offshore withdrawal is often where the real cost hides. Four routes dominate, and they are not comparable.

Cryptocurrency Speed and Operator Terms

Cryptocurrency payouts look like the obvious answer to slow withdrawals, and often are: Litecoin targets a 2.5-minute block interval, and over the 24 hours to 29 October 2026 blocks arrived every 2 minutes 30 seconds on average, giving roughly 2½ minutes for one confirmation and 15 minutes for six. Solana's slot time is around 400 milliseconds, with a confirmation reference table putting a typical wait at roughly 13 seconds. But that is the network's clock, not the operator's, and the two are frequently confused. Where a payment is denominated in a token rather than the native coin, the sender pays the network cost: a USDT transfer on TRON to a wallet that already holds USDT consumes about 65,000 Energy, and to a brand-new wallet about 130,000, which without staked Energy means burning roughly 13 TRX and roughly 26 TRX respectively. Ethereum is cheaper in the current low-gas environment — a live calculator on 3 November 2026 reported standard-tier gas of about 0.10 to 0.18 gwei, pricing a standard transfer at roughly $0.005 to $0.009 — but the fee is paid whether the transaction succeeds or fails, and the base fee is burned rather than passed to the validator. None of this is a reason to avoid crypto payouts; it is a reason to notice that "instant" describes the chain and not the cashier.

E-Wallets as a Convenient Middle Ground

E-wallets sit between the casino and the bank, and their charges are published in full, which makes them easy to compare. Withdrawals from a Skrill account to a bank account are charged at 2.80 per cent of the amount withdrawn with a minimum of EUR 3.50, effective 12 January 2026; Neteller applies the same 2.80 per cent with a minimum of USD 3.50 on the same date. Both charge a monthly service fee if the account is not used at least once every six months — EUR 5.00 and USD 5.00 respectively. Jeton's UK schedule shows a local bank transfer withdrawal taking 0 to 30 minutes with no sender or receiver fee. MuchBetter states withdrawals may take anywhere from a few hours to up to five business days depending on the method chosen, with cryptocurrency withdrawals typically taking minutes to a few hours. The pattern is consistent: the convenience of an e-wallet is paid for in percentage terms, and the percentages are small enough to be ignored until the withdrawal is large.

Rules for Cards and Bank Transfers

Card payouts ride a fast rail. Visa Direct's Fast Funds service processes transactions in real time, with funds available within 30 minutes of approval. Bank transfers ride a different one: the Faster Payments scheme maximum is £1 million per transaction, raised from £250,000 on 10 February 2022, but that is a scheme ceiling and not an entitlement — individual banks set lower limits, and over 90 per cent of Faster Payments transactions complete in under two seconds. CHAPS is the high-value same-day route with no scheme upper limit, settling the same working day subject to a cut-off. PayPal is a special case: a personal UK account incurs no fee to withdraw a balance to a bank account where no currency conversion is involved, but a failed withdrawal because of incorrect bank details attracts a 0.50 GBP bank return fee.

Bonus Money Is Not a Payment Method

One more distinction, and it is the one that generates most of the complaints. Withdrawing a deposit balance and withdrawing bonus-derived winnings are different operations with different rulebooks. In the British regime, deposit and bonus balances must be displayed separately, wagering requirements must not apply to play with the deposit balance, and a player must not be given the option to cancel a withdrawal request — reverse withdrawals were banned outright by remote technical standard 14B on 31 October 2021, on the Commission's finding that the function presented a risk to engaged and vulnerable gamblers. Offshore, that ban does not run. An operator can offer a cancel button, and every press of it is a second chance to lose the money that was already won.

The Enforcement Record of the Regulator

The brief's angle deserves its own ledger rather than a paragraph, because the numbers are the best available answer to the question of whether anything happens to these sites.

The direction of travel is upward. Websites referred to search engines rose from 124 in July to September 2024 to 321 in April to June 2025. Cease and desist notices to illegal operators ran at 113, 83, 129 and 145 across those four quarters; search-engine removals ran at 123, 109, 170 and 214. In the quarter January to March 2026 the Commission referred 226 websites to search engines and issued 98 cease and desist notices. In April to June 2026 it referred 366 websites carrying 147,721 URLs and began zero criminal investigations; in July to September 2026 it referred 1,835 websites carrying 7,677,211 URLs and issued 546 cease and desist notices. That last quarter is not a trend, it is a step change, and it coincides with something else worth noting: the Illegal Gambling Taskforce's terms of reference were published by the Department for Digital, Culture, Media and Sport on 13 May 2026, with three priorities — reducing payments to and from illegal operators, tackling online advertising of illegal gambling, and improving cross-agency enforcement.

Payments are the slow front. The Commission made its first referral to the Visa Operator Scheme in January 2025 after a test purchase on an unlicensed website, and has since made three further referrals covering three separate unlicensed websites. Its own language about this is candid: reporting payment transaction data to the Visa scheme is described as a critical and still early-stage part of the financial disruption strategy. Three referrals is not a strategy yet; it is a pilot. The Commission also refers illegal gambling content to Meta, TikTok, X and YouTube, and in April to June 2025 recorded 84 illegal lottery URLs removed from social media and 108 illegal lotteries referred to them.

Scale, for context: over the monitored period from May 2024 to July 2025, just over 1,000 unique illegal gambling websites were accessed by consumers in Great Britain, and the number identified through the Commission's affiliate-page method rose from 364 in May 2024 to 535 in July 2025 after crypto-casino search terms were added to the methodology. Time spent on illegal gambling websites by GB consumers, using the Commission's point estimate with a VPN adjustment, was 306 million minutes in January 2025, falling to 116 million minutes in June 2025 and 152 million in July 2025. The Commission is explicit that its methodology does not capture activity hidden by VPNs — which is a useful reminder that every figure in this area is a floor, not a ceiling.

And the licensing patchwork is where the regulator's reach ends. Curaçao replaced its master-licence and sub-licence model with direct licensing by the Curaçao Gaming Authority under the National Ordinance on Games of Chance, in force from 24 December 2024. Legacy "orange" sub-licence certificates of operation ended on 15 October 2025, and a historic /JAZ number or legacy seal must not be treated as proof that an operator currently holds a valid licence. The authority announced on 7 October 2026 that its previous online gaming portal would not return to service and that it was working on an alternative mechanism for verifying licensed domains, because the previous digital licence seal may be affected by the transition. Anjouan, meanwhile, has been the subject of serious questions: a broadcast investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around EUR 17,000 per licence per year, and that a former attorney-general of the Comoros described the entity selling those licences as "an illegal entity". Anjouan Gaming's own statement of 10 June 2026 is careful: "An Anjouan Internet Gaming Licence is not, and has never been presented as, a universal authorisation to operate in every country in the world". That sentence is worth reading twice in the context of a British player. It is the regulator telling you that its licence is not a permission slip.

Two of the three things a British reader would want to know about an offshore licence are therefore answered by the regulator's own documents rather than by journalism. The licence may be real and still mean very little about British consumers. And the seal may be genuine and still point at another operator's domain.

Why the Wagering Terms Are the Real Comparison

If there is one thing this topic turns on, it is the bonus term, because it is where the difference between a licensed operator and an offshore one stops being philosophical and becomes a number.

The British rule is recent and specific. From 19 January 2026, licensees must not apply wagering requirements above a maximum of ten times — a wagering requirement meaning that a customer is required to make wagers totalling a particular value for funds to become withdrawable. The Commission consulted on a ban and on caps of one, five or ten times, chose ten, and said plainly that the limit "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements". The same rules ban mixed-product promotions requiring two or more types of gambling, so "bet £5 to get 20 free spins" is non-compliant while "bet £5 and get £10 free bet" is fine, and they require terms for an incentive to be clear, transparent, fair and readily accessible to anyone the offer is shown to. The implementation date was moved from 19 December 2025 to 19 January 2026, which is itself a small lesson in how these changes land.

Offshore, none of that applies, and the published terms show it. One operator states that casino bonus amounts are subject to a 25× wagering requirement and gives a contribution chart: slots and specialty games 100 per cent, table games 20 per cent, video poker and blackjack 10 per cent, roulette and baccarat 5 per cent, and craps, live dealer games and progressive jackpots 0 per cent unless stated otherwise. A 5 per cent contribution to a wagering requirement is the same thing as a 20× multiplier applied to that play. That chart, read properly, is the single most important document on an offshore site, because it decides which games can actually clear the requirement and which merely burn the bankroll.

Then come the clauses that build in delay by design, and here the offshore examples are instructive precisely because they are written down. One casino reserves the right to limit withdrawal from winnings generated with bonus funds, including free spins and cashback, to 300 per cent of the credited bonus amount, with any excess voided. Another caps the maximum bet while wagering at €5 for regular players and rejects any bet above the limit, and states that failure to observe the rule may result in account closure, forfeit of the bonus and forfeit of winnings generated during wagering. The same operator states that redeeming two or more no-deposit bonuses in a row can result in removal of subsequent winnings. These are not hidden terms; they are published. The trap is not secrecy, it is arithmetic: a maximum cashout expressed as a percentage of the bonus, combined with a maximum bet, combined with a game-contribution chart, produces a promotion whose expected value is knowable only to someone who reads all three together.

Britain's own history of sticky bonuses is the clearest illustration of why the British rule now looks the way it does. Under a sticky or non-cashable bonus, the bonus could be used for wagering but could never itself be withdrawn and was removed on cashout. UK rules effectively ended the practice: wagering requirements must not apply to play with the deposit balance, deposit and bonus balances must always be displayed separately, and a player must be allowed to withdraw their deposit balance at any time, including while a bonus is pending. That is a structural answer to a structural trick, and it is exactly what is absent offshore.

The enforcement record shows the direction the British regime is travelling. An operator was fined £170,000 in July 2025 for failures including a term stating it had "the right at their own discretion to close accounts or forfeit winnings", and in October 2026 another agreed a £900,000 payment in lieu of a penalty that included a breach of the fair and transparent terms condition. Both figures are small relative to the revenues involved. But the terms that produced them would be unremarkable on an offshore site, and that is the point of the comparison.

How Long a Withdrawal Should Take — and Why It Often Doesn't

The British benchmark for payouts is unusually well documented, which makes it a useful yardstick even for someone looking at a site outside the scheme. Commission data covering June to September 2024 recorded 44.2 million withdrawals by customers of large online operators; 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours and 0.1 per cent took up to 48 hours. Earlier data from some of the largest operators showed around 99 per cent of withdrawal requests approved, processed and fulfilled within 24 to 48 hours. Consumer research published in July 2026 nevertheless found only 49 per cent of people who had gambled in the past 12 months agreed that it is quick and easy to withdraw winnings, with 33 per cent neutral and 18 per cent disagreeing. Both things are true: the machinery is fast and a large minority of customers do not experience it as fast.

The reason sits in the complaints data. Problems with withdrawals from accounts were the number one topic raised by consumers to the Commission's contact centre, and by July 2024 the Commission said it continued to receive around 2,000 complaints a year about withdrawal delays, still the top subject. Complaints coded "withdrawals and/or financial transactions" fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025 — a genuine improvement, on a still-large base. An August 2026 Commission blog reported that over a quarter of complaints reaching its contact centre concern identity verification, a concern customers raise when they are asked for documents only on attempting to withdraw.

Two things follow. The first is that the Commission has said it is not acceptable for operators to introduce friction when a customer tries to withdraw rather than when they deposit, does not consider it fair, transparent or necessary to delay withdrawals purely for customer-interaction purposes, and says that where it has no regulatory concerns about a customer there is no valid reason to delay a payout. The LCCP sets no fixed maximum number of days within which a withdrawal must be completed; the regime relies on the fair-and-open condition, the identity-verification condition and the prohibition on unfair terms. The second is that this is exactly the discipline offshore sites do not have. Where a British operator knows that requiring documents late is a licence condition breach, an offshore one knows only that it is a day or two more of float. The customer cannot easily tell the difference from the outside, which is why the timing of the document request — at onboarding, or on the way out — is the most diagnostic detail on any site.

Questions About Casinos Without GamStop

Can a casino really be outside GamStop?

Yes, and the mechanism is simple: the obligation to join the scheme comes from a Gambling Commission licence condition, so a site with no Commission licence has no obligation to participate. Since 31 March 2020 all online operators licensed in Great Britain must be part of GamStop as a condition of their licence, under social responsibility code provision 3.5.5. Sites licensed only abroad fall outside that condition entirely, along with the rest of the British rulebook.

Does a GamStop exclusion still apply if I sign up with an offshore site?

The exclusion itself stands for its full term regardless of where a person plays, because it is an agreement with the scheme, and it does not lapse at the end of the chosen period — it stays until the person contacts GamStop to remove it. What an unlicensed operator does not have is any duty to check the register. So the exclusion is unchanged; what is missing is the enforcement that would make it bind.

Is it illegal to play at a casino without a GamStop link?

The offence under section 33 of the Gambling Act 2005 attaches to the person providing facilities for gambling without an operating licence, not to the adult customer. It is a criminal offence punishable on summary conviction by up to 51 weeks' imprisonment, a fine up to level 5, or both — and the Gambling Commission has stated that this applies to operators licensed in another jurisdiction who offer commercial gambling to consumers in Great Britain without a Commission licence. The regulator's summary of offences is consistent with that: providers, not players.

How do pay by phone bill casinos without GamStop actually work?

Poorly as a general rule, and the reason is regulatory rather than technical. Licence condition 5.1.2, effective 31 January 2024, requires licensees to accept payment from Great Britain customers only by a method whose provider is a payment service provider under the Payment Services Regulations 2017 — and mobile-phone billing has never sat comfortably inside that definition. On an unlicensed site the constraint disappears, which is exactly why phone-billing deposits turn up there and why they are difficult to reconcile with any meaningful source-of-funds check.

Are live dealer casinos without GamStop any different from other offshore sites?

Not in licensing terms: a live dealer table is the same product under the same licence as any other casino game, and the regulator's evaluation of the operator is identical. The practical differences are two. Game weighting on a bonus is usually at the worst end of the chart — table games at 20 per cent, roulette and baccarat at 5 per cent, and live dealer games often at zero — so a live table is a poor way to clear a wagering requirement. And if the operator runs a unified wallet across products, the money is the same money.

Do offshore casinos use the same licence as British ones?

No. British operators hold a licence from the Gambling Commission, and the Commission can only regulate websites that trade or advertise to customers in Great Britain and hold its licence. Offshore operators hold licences from other jurisdictions — Curaçao under its reformed regime, Malta, Anjouan, Kahnawà:ke and others — or in some cases claim one that does not exist. Costa Rica is the clearest example: it operates no comprehensive gambling licensing regime, its Legislative Assembly rejected a bill in early 2026 that would have introduced mandatory licensing, and the "data processing license" sometimes referenced in the industry is not a licence in the strict legal sense.

What happens to an unlicensed site when the regulator acts?

Usually three things in sequence, and a possible fourth. Disruption first: since April 2024 the Commission issued 3,140 cease and desist and disruption notices, comprising 2,032 cease and desist notices, 774 registrar referrals, 402 host referrals and 3 payment provider referrals, and secured 287,961 search-URL removals from 447,778 referrals. Then, if the operator has substantial assets or presence, criminal investigation — though every quarter from April 2025 to March 2026 recorded 0 or 1 prosecutions commenced. Then, at the far end, payments pressure through the Visa Operator Scheme, which the Commission itself calls early-stage.

What is the most reliable sign that an offshore operator is serious?

Readiness to be checked, and to lose the sale. An operator that publishes its licence number, points to the authority's register rather than to its own badge, states its complaints route with a named ADR body and a thirty-day clock, and prints its maximum cashout clause next to the bonus rather than three clicks away, has decided that being verifiable is worth more than the marginal customer who would be put off. That is a commercial choice, not a moral one — but it is the choice that matters, and it is visible in about ten minutes.

Casinos Without GamStop Overview

The market exists because the British scheme is deliberately hard to leave, and the operators serving it are not offering a loophole so much as an unsupervised account — which is a different and worse thing than a loophole, because the exclusion still stands exactly as written while the protections that would have surrounded it do not exist at all.

The regulator's answer is disruption rather than prosecution, and the numbers say it is getting larger rather than smaller: in April to June 2026 the Commission referred 366 websites to search engines, and in July to September 2026 it referred 1,835 websites carrying 7,677,211 URLs while issuing 546 cease and desist notices to illegal operators. At the same time it commenced one prosecution in the whole of the year to March 2026 and is still measuring the effect of its payment referrals in single figures. If anyone needs help rather than analysis, the National Gambling Helpline run by GamCare is free on 0808 8020 133, 24 hours a day, every day of the year.