Non GamStop Sites and the Licence Gap the Regulator Keeps Chasing

Updated November 2026
Licensed
usAvailable in US
Fast payouts
18+ Only

A site that does not appear on the GamStop register holds no Gambling Commission licence, so registering with the scheme will not block it beyond the fact that it should not be serving British players at all. Gambling Commission analysis published on 5 November 2026 estimated that 2.5 per cent of people who had gambled online in the past four weeks had engaged with an illegal gambling website in that period.

Non GamStop sites are simply gambling websites that hold no Gambling Commission licence — a Curaçao, Anjouan or Kahnawà:ke permission at best, and in some cases no licence worth the name at all. Because they sit outside the British system, none of the machinery that protects players here travels with them: no GamStop check, no statutory levy contribution, no access to an approved alternative dispute resolution provider, and no route to the Commission, which is a regulator rather than an ombudsman and cannot recover anybody's money. That is the whole of the appeal and the whole of the problem. It is also why the question worth asking is not which of them is best — brands change, domains change, and I have no interest in a league table — but what the regulator does about them, whether it is working, and what the paperwork of an offshore licence actually tells a careful reader. This is a column about that market as it stands, not a shortlist.

Table of Contents12

The Gap Older Players Fall Into

One small point ofulary first, because it catches people out. The scheme is often typed "gamestop", a slip invited by the word "game", and it is written GamStop everywhere it appears legitimately, including on the register itself. GamStop Online, as it has been called since a website update in November 2025, is run by The National Online Self Exclusion Scheme Limited and blocks a person from signing up for or using accounts with gambling businesses licensed in Great Britain. Under licence condition 3.5.5 of the Licence Conditions and Codes of Practice, every GB-licensed online operator must participate. The Commission added a further requirement in April 2020: operators must check their entire customer base at least every 24 hours, which also stops registered people receiving direct marketing.

That requirement is what makes the scheme work, and its absence is what defines the sites this page is about. Self-exclusion through GamStop holds for its full term and then stays in place until the person contacts GamStop to remove it — a rule the organisation has defended publicly, devoting a section of its 2025 annual report to its refusal to remove registrations early. There is no early exit and no appeal to convenience. And it should be said plainly, because the alternative reading circulates: an offshore site is never a way round a self-exclusion. It is a website operating outside the licence that makes the exclusion enforceable, and the Commission issued an industry warning notice on 20 January 2025 noting that such sites often target people who have self-excluded.

If gambling has become a problem, the help exists and it is free. The National Gambling Helpline, run by GamCare, is on 0808 8020 133, 24 hours a day, every day of the year; callers in Wales are given 0808 2819 265. GamCare runs live chat and WhatsApp on the same number, and Citizens Advice offers free, confidential help with debt. Gambling sites licensed in Great Britain are not covered by GamStop.

What the Commission's Own Numbers Show

The best checkable benchmark for this topic is not a payout speed or a bonus cap; it is the regulator's disruption ledger, because it measures whether the gap is being closed. Since April 2024 the Commission's Illegal Markets team has issued 3,211 cease and desist notices and disruption notices — 2,032 cease and desist notices, 774 registrar referrals, 402 host referrals and 3 payment provider referrals — and, over the same period, referred 447,778 Bing and Google URLs, securing 287,961 removals. Across 160 illegal gambling websites for which traffic data existed, engagement fell by an average of 32 per cent after disruption activity.

Those are cumulative figures, so the more revealing question is whether the pace is rising. It has risen sharply: websites referred to search engines went from 124 in July to September 2024 to 321 in April to June 2025, and then to 1,835 websites and 7,677,211 URLs in July to September 2026, a quarter in which 546 cease and desist notices were issued. The Commission is candid about which of its methods work. Registrar blocks and website suspensions produced the largest average fall in engagement, 91 per cent each, ahead of GEO IP blocking at 60 per cent, Bing removal at 52 per cent and Google removal at 30 per cent. Facebook removal managed 8 per cent. The regulator's own conclusion is that search-engine removal makes a site harder to find without fully blocking access — an admission that reads like a shrug dressed as a strategy.

There is a limit to enforcement that the figures also expose. Across April 2025 to March 2026, every quarter recorded zero or one prosecutions commenced, a total of one, in October to December 2025. The architecture is disruption rather than the criminal law, and it is worth remembering what section 33 of the Gambling Act 2005 provides: providing facilities for gambling without an operating licence is an offence carrying, on summary conviction, up to 51 weeks' imprisonment, a fine not exceeding level 5, or both. The offence attaches to the operator, not the customer — the Act's general gambling offences are aimed at those who provide facilities, and sections 47 and 49 confirm that framing for children and young persons too. In Scotland the maximum term is six months.

Offshore Licences Compared by What They Require

The comparison that matters here is not between brands but between the licensing regimes behind them, because the regime determines what happens when something goes wrong. Values below come from the regulators' own published schedules and standards.

Licensing regimeApplication cost (one-off)Annual costWhat it demands of the operator
Curaçao (LOK, from 24 December 2024)EUR 4,592, plus EUR 150 per ultimate beneficial owner and per qualified interest holderEUR 47,450 (EUR 24,490 licence fee plus EUR 22,960 supervisory fee)Direct CGA licensing; two seals, and a Certificate of Operation only for a registered player-facing domain
AnjouanEUR 17,828EUR 17,828 renewal, plus EUR 500 per additional domainSegregated player funds, certified random number generators, AML and age verification; no territorial restrictions claimed under Anjouan law
Kahnawà:keUSD 35,000 CPA application, rising to USD 40,000 on 1 January 2027USD 20,000 CPA fee, plus USD 1,000 per Key Person PermitHosting at a single Mohawk Internet Technologies data centre; a contractual relationship with players; permanent self-exclusion
Malta (MGA)EUR 5,000EUR 25,000 plus 5% gaming tax on revenueEUR 100,000 paid-up capital for Type 1 and 2 licences; published list of unauthorised URLs
Costa RicaNo licensing regimeNot applicableNo formal framework; a "data processing licence" is not a licence in the legal sense

Read that table as a schedule of effort, not of virtue. A EUR 47,450 annual Curaçao bill and a EUR 17,828 Anjouan one are trivial sums against the Gross Gambling Yield of a casino running a few thousand British accounts, and the regimes that cost least ask least. Kahnawà:ke, which has regulated interactive gaming since 1999 under regulations made on 8 July 1999, is the strictest of the offshore group in its published standards — and it still leaves British players without the protections this country's licence imposes on operators here. Costa Rica is the honest entry: no regime at all, a mandatory licensing bill rejected in early 2026, and games of chance generally prohibited under its own law. An operator claiming a Costa Rican licence is claiming something that does not exist.

The Curaçao seal is the most counterfeited badge in this market, so it is worth knowing how it works. A Certificate of Operation Seal is issued only to B2C operators, only for an approved and registered player-facing domain. Clicking it must redirect to cert.cga.cw; if the seal differs in design, colour or format, the site is not CGA-authorised. If the certificate behind it names a different domain from the one being browsed, the certificate belongs to another operator and the site should be treated as unauthorised. And a historic /JAZ number or legacy seal is not proof of a current licence: the four former master licensors stopped issuing on dates between 18 August 2024 and 31 January 2025, and the legacy orange certificates ended on 15 October 2025.

Best Non GamStop Sites and Judging the Shelf Not the Wares

The phrase "best non GamStop sites" appears 170 times a month in UK searches, and it is the wrong question asked sincerely. There is no durable ranking, because the population churns: domains go dark, licences lapse, operators rebrand behind new front ends. What a reader can do is judge the shelf rather than the wares — the licensing posture, the paperwork and the complaints route — and that judgement is the same whether the subject is non GamStop casino sites or non GamStop poker sites. The Gambling Commission's estimate of the market was 586 illegal gambling websites accessible to British consumers in September 2026, 4 per cent fewer than the previous three-month average but 4 per cent more than a year earlier. That is not a stable marketplace to rank.

The scale estimates disagree with each other, which is itself information. Market-intelligence firm H2 Gambling Capital put stakes with illegal operators in the UK at £16.6 billion in 2025, up from about £5 billion in 2019. A Frontier Economics study for the Betting and Gaming Council, industry-commissioned, conservatively estimated £2.7 billion staked annually online on the black market, equal to 2.1 per cent of the £128 billion staked with regulated remote casino, betting and bingo operators. Yield Sec analysis for the Campaign for Fairer Gambling put the unregulated share at 9 per cent of gross gambling revenue in 2025. When a trade body's numbers and a campaign group's numbers point the same way with different decimal places, the direction is the finding.

Non GamStop gambling sites split roughly into three families, and the split is more useful than any list.

Curaçao-Licensed Casinos and Slots Sites

These are the bulk of the market, and slot-heavy sites dominate it. To put the traffic in proportion: remote casino gross gambling yield was £5.0 billion in April 2024 to March 2025, of which £4.2 billion came from slot games. A site chasing that demand offshore does not need a British licence to be found by British players, only a search engine that has not yet removed it. The CGA's register listed 704 licences held by 698 operators, of which 552 were active, on a third-party reading at 03:30 UTC on 6 November 2026 — a figure from an aggregator rather than the authority, so treat it as indicative, but note what it implies about how many are dormant or duplicated.

Betting and Poker Rooms Under Offshore Licences

Poker and betting carry higher operational demands than slots — liquidity, live markets, settlement — and the British-facing operators here have often held a European licence rather than a Curaçao one. Malta is the common choice: a B2C Gaming Service Licence there requires a non-refundable fixed annual fee of EUR 25,000 and gaming tax at 5 per cent of gaming revenue, on top of EUR 100,000 of paid-up capital for Type 1 and Type 2 licences. It is a real regime, and it is still not the British one. An MGA licence does not entitle an operator to serve Great Britain, and the MGA keeps a list of unauthorised URLs declaring that any reference to a Maltese licence on them is false and misleading, with the most recent entries carrying notice dates of 30 October 2026.

Bingo and Smaller Verticals

Bingo is the quiet corner of this market, and the least well served by the licensing story. Non GamStop bingo sites tend to be white-label products on shared platforms, which means the licence sits with an entity several steps removed from the thing a player is actually using, and the complaint route runs through the platform rather than the brand. Anjouan requires its licensees to designate an Authority-approved dispute resolution provider and to publish its name and contact details in player-facing terms, with operators expected to resolve complaints within 30 days before escalation is permitted; the approved providers are EGIS ADR, Axion ADR, iGaming ADR and an approved dispute resolution provider.

Non GamStop Site Payments for PayPal Cards and the Wallet Levy

Payment methods are where the offshore pitch and the offshore reality part company most visibly, and the phrase "non GamStop sites with PayPal" is a good example of a promise that mostly cannot be kept. The obstacles are not only the operators' preference. Gambling Commission licence condition 5.1.2, effective 31 January 2024, requires licensees to accept payment from Great Britain customers only by a method whose provider is a payment service provider within the Payment Services Regulations 2017 — a rule about licensed operators, but one that shapes which processors will touch the market at all. And the Commission made its first referral to the Visa Operator Scheme in January 2025 following a test purchase on an unlicensed site, with three further referrals since; it describes payment disruption as critical, and as still early-stage.

The table below is the payment plumbing as the providers price it, not as casinos advertise it. Fees are those charged by the wallet or network, and they apply on top of whatever the casino does.

MethodTypical withdrawal cost, as publishedTiming
Skrill wallet to bank2.80 per cent, minimum EUR 3.50Bank-transfer dependent
Neteller wallet to bank2.80 per cent, minimum USD 3.50Bank-transfer dependent
MiFinity to cryptocurrency1.8 per cent, via CryptopayMinutes to hours
MuchBetterAccount free; USD 5 monthly if inactive 12 monthsA few hours up to 5 business days
BitcoinNetwork fee only; most merchants require 6 confirmationsAverage 10-minute blocks; 6 confirmations typically about an hour
TRON USDT (TRC-20)About 13 TRX burned without staked Energy; about 26 TRX to a new walletSeconds to a minute on-chain
Card payout via Visa DirectSet by the operatorFunds available within 30 minutes of approval

Two details are worth extracting from that. First, the wallet business is expensive at the edges: Skrill charges no service fee only if the account is used at least once every six months, otherwise EUR 5.00 is deducted monthly, and it applies a 4.49 per cent foreign-exchange fee where conversion is needed. Neteller is the same shape — free while used every six months, otherwise USD 5.00 a month, plus a 4.49 per cent FX fee. The wallet is not a free pipe; it is a second business taking a cut of the same money. Second, crypto is fast and unforgiving rather than free. A TRON USDT transfer always consumes Energy because it is a smart-contract call, and where Energy is short the chain burns TRX at 100 sun per unit — roughly 13 TRX for a standard transfer. Send to a brand-new wallet and it costs about double, because a cold address costs more Energy to reach. Bitcoin's ten-minute block is an average, not an appointment: the probability of a block within any ten-minute window is about 63 per cent, rising to 99.7 per cent within an hour.

And on the British side of the comparison, the payment rules are not mainly about speed. Credit cards have been banned for gambling since 14 April 2020 under licence condition 6.1.2, and operators must satisfy themselves that money arriving from an e-wallet was not loaded from a credit card. Reverse withdrawals were permanently banned by requirement 14B on 31 October 2021: consumers must not be given the option to cancel a withdrawal request. Bank gambling blocks, listed by the Commission for eleven banks as of 16 October 2026, decline payments under gambling merchant category codes. None of that follows a player to an offshore site. It is not merely that the protections are absent; the mechanisms that enforce them sit inside a licence the site does not hold.

The Identity Checks This Turns On

Every benefit a player imagines an offshore site offers runs through one mechanism, and it is identity verification. Get this wrong and nothing else about the site matters.

On a British-licensed site, licence condition 17 has required verified identity before gambling since 7 May 2019, using name, address and date of birth at minimum. In practice most verification happens electronically and instantly, which is why it feels invisible. The interesting rule is 17.1.1: a withdrawal request must not trigger a demand for information the licensee could reasonably have requested earlier — though that does not stop a request the operator must make at that moment under another legal obligation, such as anti-money-laundering rules. Offshore, the obligation itself is different. Under the Money Laundering Regulations 2017, a remote casino must identify and verify a customer at deposits or withdrawals of €2,000 or more, and the threshold applies to linked transactions too. Where the operator applies the "hybrid approach", it can verify age at registration and defer full verification until the €2,000 line is crossed.

The first time is therefore usually frictionless and the second time is not. A player deposits, plays, wins, and requests a withdrawal. Only then does the document request arrive — passport, driving licence, household bill, a selfie if fraud is suspected, sometimes bank statements to check source of funds — and the money waits while it is processed. The Commission says it cannot give a timescale for ID checks because the length varies, and that a request for documents is the slower path. It also reports that over a quarter of complaints reaching its contact centre concern identity verification, a concern customers raise when documents are demanded only at withdrawal. That pattern is the single most common reason a withdrawal stalls, and it is the same pattern on both sides of the licence line.

The warning signs are more legible than people expect. A demand for documents that arrives for the first time at withdrawal, having been absent at deposit. A maximum cashout clause attached to bonus funds. A term giving the operator sole discretion to void winnings. Verification "pending" for days with no named person handling it. And, offshore, a change in the terms during an active dispute — the Competition and Markets Authority's guidance is blunt that operators must not change the deal on a free bet once a customer has started playing, and that terms allowing an operator to decide unilaterally when play breaches a promotion are not acceptable.

Five Signs an Operator Can Be Trusted

These are the checks I would run, in this order, and they take about ten minutes in total. None of them requires a deposit.

The Licence Is Verifiable in One Click

A British licence appears on the Gambling Commission's public register, and the register shows the activities and domain names the licence covers. Check that your domain is among them. For Curaçao, click the Certificate of Operation Seal and confirm it redirects to cert.cga.cw and names the domain you are on. A seal that goes nowhere, or that names a different domain, is the loudest possible warning.

The Terms Give a Withdrawal Deadline

Search the terms for a stated processing time and a stated maximum cashout. A British-licensed operator cannot impose a maximum limit on what may be withdrawn from a deposit balance — the Commission's example of a prohibited term is "You may withdraw up to £50 per day and up to £500 per week". If a site's terms set a ceiling on withdrawals from deposit money, that is a disqualifying clause, and its presence offshore should be assumed absent proof otherwise.

The Complaints Route Names a Real Body

A GB licence requires access to a Commission-approved alternative dispute resolution provider free of charge if a dispute is not resolved within eight weeks. The approved list is short and public: ADR Group, Pegasus ADR Service, an approved ADR provider, CEDR, eCOGRA, IBAS, ProMediate and Tattersalls Committee. IBAS and eCOGRA handle most gambling disputes. If the terms name a provider that does not appear on any regulator's approved list, assume there is no route at all.

Customer Funds Have a Stated Protection Rating

British licensees must publish one of three ratings — not protected, medium protection or high protection — and an operator rated not protected must remind customers every six months, stating the value of funds held. Ask the harder question too: even a separate client bank account does not guarantee return of money on insolvency, and businesses may hold customer money in overseas accounts.

The Licence Actually Covers Great Britain

An MGA licence is not a British licence, an Anjouan licence is not a British licence, and a Curaçao licence is not a British licence. The Commission states plainly that it is illegal to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where the operator holds a licence elsewhere. Anjouan Gaming said in a statement on 10 June 2026 that its licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world". That is the regulator telling you what the affiliate page will not.

How to Check a Site in Six Steps

None of this involves gambling, and none of it involves a deposit.

  1. Open the Gambling Commission's public register and search the domain. Reason: the register shows which activities and domain names a British licence covers, so a mismatch between the advertised name and the licensed domain is immediately visible.
  2. Click whatever licence seal is displayed and follow it. Reason: a legitimate Curaçao Certificate of Operation Seal must redirect to cert.cga.cw and must name the domain you are browsing; a seal that leads nowhere, or names someone else's domain, is either misused or fraudulent.
  3. Read the withdrawal section of the terms before anything else. Reason: this is where maximum cashouts, processing windows and single-withdrawal restrictions live, and those clauses decide whether winnings are real.
  4. Check whether the stated dispute route appears on a regulator's approved list. Reason: a named ADR provider that no regulator recognises is a promise with nothing behind it, and the dispute is where an offshore relationship actually ends.
  5. Look up the customer funds protection rating. Reason: it tells you what happens to your balance if the operator becomes insolvent, and the honest answer for many offshore sites is: nothing.
  6. Write down the name of the licensed entity, not the brand. Reason: brands are marketing, entities are legal, and complaints, terms changes and disputes are all conducted against the entity.

Welsh Non GamStop Sites and the Rest of the UK

One cluster of searches deserves a straight answer. "Welsh non GamStop sites" implies a regional licence, and there is no such thing: the Gambling Commission licenses Great Britain, so a licence covering England covers Wales and Scotland. What is genuinely different is the support line. Callers in Wales are given the National Gambling Helpline number 0808 2819 265, while 0808 8020 133 covers England and Scotland. GamCare provides information, advice and support across England and Scotland 24 hours a day, 365 days a year, through the helpline, live chat, WhatsApp and Facebook, plus a peer-support chatroom. Citizens Advice Scotland runs a gambling support service advice line on 0800 328 1131, open Monday to Friday from 10am to 3pm, for free confidential help with debt, housing, work and relationships linked to gambling.

Where an offshore site does serve a British player, it does so without contributing to any of that. The statutory levy, introduced by the Gambling Levy Regulations 2025 and commenced on 6 April 2025, charges online operators 1.1 per cent of previous-year Gross Gambling Yield and raised just under £120 million in its first year, ringfenced solely for research, prevention and treatment of gambling-related harm and split 50 per cent treatment, 20 per cent research and 30 per cent prevention. An operator outside the licence pays none of it and is asked for none of it.

The Case Against the Shortlist

Anyone hunting for betting sites non GamStop or a safe non GamStop site is working through a problem the market cannot solve, because the thing being sought — a site with the protections of a British licence and none of its constraints — does not exist by construction. The constraints are the protections. GamStop checking, the stake limits that came in on 9 April 2025 at £5 per spin and 21 May 2025 at £2 for under-25s, the ten-times wagering cap in force since 19 January 2026, the reverse withdrawal ban, the credit card ban, the approved dispute route and the levy are not separate features that could be unbundled and carried across. They are conditions of a licence, enforceable because the licence exists.

And on the question the brief actually asks — what the regulator does about unlicensed sites — the answer is a great deal of administration and very little prosecution. There were 311 disruption actions in the quarter to September 2026, 38 per cent more than the prior quarter, and 77 per cent of disrupted websites saw a reduction in estimated traffic. That is a real effect on supply. It is not a cure for demand, and the Commission has been refreshingly honest that its strongest tools are the plumbing ones: registrar blocks, host suspensions, geo-blocking and payment referrals, with search removal the weakest of the lot. The taskforce published terms of reference on 13 May 2026 with three priorities — reducing payments to and from illegal operators, tackling online advertising, and improving cross-agency enforcement — which is a fair summary of where the fight actually is: not in the casino lobby but in the card rails and the search results.

Questions About Non GamStop Sites

Are non GamStop sites legal to use?

The offence sits with the operator, not the player. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, carrying on summary conviction up to 51 weeks' imprisonment, a fine not exceeding level 5, or both, and the Commission says plainly that offering commercial gambling services to British consumers without a Commission licence is illegal even where the operator holds a licence elsewhere. Playing is not the crime; the absence of a licence is the reason nothing protects you.

Which UK non GamStop sites are safest?

"The safest" is a comparison that cannot hold, because the population changes faster than any ranking. Take the Commission's own figure: 586 illegal gambling websites accessible to British consumers in September 2026. A regulator in Curaçao, Anjouan, Kahnawà:ke or Malta supervises an operator, but none of them supervises a British player's rights. Judged honestly, the safest non GamStop site is still less safe than an ordinary licensed one.

Can I use PayPal at non GamStop casino sites?

Sometimes, but the promise is usually colder than the headline. Licence condition 5.1.2 requires British licensees to use payment service providers within the Payment Services Regulations 2017, and the Commission began referring unlicensed sites to the Visa Operator Scheme in January 2025, describing payment disruption as critical and still early-stage. Processors withdraw when the regulator pushes. A casino advertising PayPal is advertising a processor relationship that can end without notice.

Do offshore sites offer better bonuses than British ones?

Larger headline numbers, yes; better terms, rarely. Since 19 January 2026 British licensees cannot apply wagering requirements above ten times bonus funds and cannot mix gambling products within one incentive. Offshore multipliers commonly run at 35 to 50 times for a welcome offer and 40 to 60 times for a no-deposit bonus, often with a cashout cap — one operator's published terms limit bonus-derived withdrawals to 300 per cent of the credited bonus. The multiplier is the price, not the prize.

What happens if an offshore site refuses to pay?

Your options narrow quickly. A GB-licensed operator must let you reach a Commission-approved ADR provider free of charge if the dispute is unresolved after eight weeks; ADR providers recorded average resolution times of 31 days at eCOGRA and 20 days at IBAS in their most recent annual reports. Offshore, you depend on whatever the terms name. The Commission is a regulator, not an ombudsman, so it cannot recover individual funds. Assume the dispute ends where the terms say it ends.

Does registering with GamStop stop me using them?

No, and that is the point. GamStop works because licence condition 3.5.5 requires every GB-licensed operator to participate, and since April 2020 to check its whole customer base at least every 24 hours. An offshore site is not in the scheme and is not checking. Self-exclusion holds for its full term and then remains in place until the person contacts GamStop to remove it — but only inside the licensed market. An offshore site is never a way round it, and the Commission warned in January 2025 that such sites often seek out excluded players.

What the Ledger Says

The argument for non GamStop sites is an argument for a gap, and the Commission's ledger shows a regulator filling that gap with paperwork, referrals and geo-blocking because the criminal route is barely used — one prosecution commenced in the whole of April 2025 to March 2026. The single figure I would keep from all of it is the one on the help side: the National Gambling Helpline is on 0808 8020 133, free, 24 hours a day, every day of the year, and it answers whether or not the site you are thinking about holds a licence.

As of 13.11.2026, ukfastpayoutguide.com takes the position that the licence is the product, and that a website which cannot be found on a public register has already answered the only question worth asking.

Material created by the team ukfastpayoutguide.com