Online Casinos Not on GamStop and What the Regulator Does About Them in 2026

An online casino not on GamStop is one run outside the Gambling Commission's licence, so it is not plugged into the national self-exclusion scheme and cannot check it. It is not licensed in Great Britain, UK protections do not apply, and the regulator pursues it as an illegal operator rather than as a rival.

Plenty of sites would like you to believe "not on GamStop" is a feature. It is not. It is a description of a licensing gap, and in this market the gap is where the trouble lives. Anyone who has registered with GamStop — and there are 614,738 people on the register as of July 2026 — cannot sign up with a Great Britain-licensed operator for the whole of their chosen term, so an offshore site is sometimes presented as the answer. It never is. It is the absence of a check.

My interest in this corner of the market is not the offers. It is what the regulator does about it: how many sites it chases, which disruption methods actually work, and how thin the enforcement is behind the headlines. That is where the numbers are, and they are more interesting than any welcome bonus.

The scheme itself is worth pinning down first. It is always written GamStop, though it is often typed "gamestop" — the word "game" suggests itself, and search engines cope. GamStop Online is the UK's national online self-exclusion scheme, run by The National Online Self Exclusion Scheme Limited, and it has been blocking people from Great Britain-licensed online gambling since 27 April 2018.

Because participation is a licence condition — Social Responsibility Code 3.5.5 of the Licence Conditions and Codes of Practice, in force since 31 March 2020 — every operator the scheme covers must check its entire customer base at least every 24 hours. The Commission made that a requirement in April 2020. An offshore site has no such obligation, because it has no licence to lose. That single fact is the whole subject.

The Numbers Behind the Phrase

There are three figures worth holding on to before anything else.

The first is how many illegal sites there are. The Commission's illegal gambling dashboard recorded 586 illegal gambling websites accessible to GB consumers in September 2026 — 4 per cent less than the previous three-month average, but 4 per cent more than September 2025. The direction of travel is sideways, which for a market this size is a strange sort of success.

The second is how much traffic the advice reaches. Gambling Commission analysis published 5 November 2026 estimates that 0.6 per cent of respondents engaged with illegal gambling websites in the past four weeks, with a further 0.4 per cent in the past 12 months, while 94.4 per cent showed no indication of using one. Among those who had gambled online in the last four weeks, the estimate rises to 2.5 per cent, plus 1.5 per cent over the year. Small percentages, large country.

The third is the size of the money. Market-intelligence firm H2 Gambling Capital estimates the amount staked with illegal gambling operators in the UK reached £16.6 billion in 2025, up from about £5 billion in 2019, with the proportion of gambling happening legally falling from 97 per cent in 2019 to 92 per cent in 2025. Estimate-makers disagree — an industry-commissioned Frontier Economics study put annual online black-market stakes at £2.7 billion — but even the modest ones describe a business, not a nuisance.

Set against that, the enforcement totals are sobering. Since April 2024 the Commission's Illegal Markets team has issued 3,140 cease and desist and disruption notices: 2,032 cease and desist notices, 774 registrar referrals, 402 host referrals and 3 payment provider referrals. Over the same period it referred 447,778 Bing and Google URLs and secured 287,961 removals.

Three payment provider referrals. Out of 3,140 pieces of paper, three went to the people who move the money. The Commission calls reporting payment transaction data to the Visa Operator Scheme "critical and still early-stage", which is a polite way of saying it has barely started. Everything else — the notices, the referrals, the delistings — is done at the edge of the problem rather than at its centre.

What the Gambling Commission Actually Does

The Commission's approach is essentially a chase: find the sites, tell them to stop, ask registrars and hosts to pull them, ask search engines to delist them, and measure what happens next.

Across 160 illegal gambling websites for which traffic data existed, there was an average 32 per cent decrease in engagement following disruption activity. That headline conceals enormous variation. By method, registrar blocks and website suspensions produced the largest average fall in engagement — 91 per cent each — ahead of GEO IP blocking at 60 per cent, Bing removal at 52 per cent, Google removal at 30 per cent and Facebook removal at 8 per cent.

Read that list again, because it says something the Commission itself acknowledges: search-engine removal makes a site harder to find but does not fully block access. Pulling a domain from Google is a visibility measure. Blocking it at the registrar or the host is what actually stops a determined visitor. The Commission says so plainly, noting that GEO IP blocking and registrar blocks are more effective than search-engine removals.

The quarterly figures show the pipeline filling. Websites referred to search engines rose from 124 in July to September 2024 to 321 in April to June 2025; by April to June 2026 the Commission referred 366 websites representing 147,721 URLs, and in July to September 2026 it referred 1,835 websites and 7,677,211 URLs and issued 546 cease and desist notices. That jump in URL counts is the shape of the modern illegal market: not one site, but a domain factory.

And the criminal end? Across April 2025 to March 2026, every quarter recorded 0 or 1 prosecutions commenced — a total of one, in October to December 2025. April to June 2026 began zero criminal investigations. Catching the person behind an offshore casino is evidently not the working part of the strategy. Making the site unprofitable to run is.

There is one further attempt worth naming. An industry warning notice on 20 January 2025 flagged casino games supplied by licensed operators turning up on unlicensed websites, and noted such sites often target customers who have self-excluded via GamStop and may have inadequate social responsibility and anti-money-laundering controls. Licensed suppliers feeding unlicensed sites: that is the plumbing, and it is where the Commission's leverage is most real.

The Licence Is the Whole Argument

The one rule everything else hangs on is section 33 of the Gambling Act 2005. It makes it an offence for a person to provide facilities for gambling without an operating licence, and it is immaterial whether the facilities are provided wholly or partly by remote communication, and whether they are provided inside or outside the UK. On summary conviction the offence carries imprisonment for up to 51 weeks, a fine up to level 5 on the standard scale, or both — six months in Scotland.

For remote gambling the section bites if at least one piece of remote gambling equipment used is situated in Great Britain, or, under the post-2014 wording, if the person providing the facilities knows or should know that they are being used, or are likely to be used, in Great Britain. The Commission's own line is blunt: it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where the operator holds a licence in another jurisdiction.

Note who commits the offence. It is the operator's crime, not the player's. The Act's general gambling offences attach to those who provide facilities — sections 47 and 49 are the narrow exceptions about children and young people, section 330 covers knowingly advertising unlawful gambling. The adult consumer sitting at home is not the target. That is a real comfort to a player and a cold one to a business, and it explains the whole enforcement pattern above: chase the supply, not the demand.

Curaçao Licensing Reform Delays and Unverifiable Seals

Most sites accepting UK players without a Commission licence point to Curaçao, and Curaçao has been rewriting its own rulebook. The National Ordinance on Games of Chance took effect on 24 December 2024, replacing the old master-licence and sub-licence model with direct licensing and supervision by the Curaçao Gaming Authority.

The transition has been a study in delay. Operators holding a valid licence when the LOK came into force received a six-month provisional licence by operation of law, due to expire on 24 June 2025; the CGA then extended those by a further six months, to 24 December 2025. Licensing activities ceased for the four former master licensors at different moments across 2024 and early 2025, and the legacy "orange" sub-licence certificates of operation ended on 15 October 2025. The CGA's own guidance is that a historic /JAZ number or legacy seal must not be treated as independent proof that an operator currently holds a valid licence.

Verifying a Curaçao claim is not impossible, just fiddly. The authority issues two different things — a Certificate of Operation Seal, only for an approved player-facing domain, and a License Certificate Seal, which is not domain-specific. Clicking a Certificate of Operation Seal must redirect to the official verification portal, and if the seal differs in design, colour or format the website is not authorised. If the certificate behind the seal shows a different domain from the one being viewed, the site is displaying another operator's paperwork.

There is a live snag. On 7 October 2026 the CGA said its previous online gaming portal would not return to service and that it is working on an alternative mechanism for verifying licensed domains, because the previous digital licence seal may be affected by the transition. In other words, at the moment this is written, some Curaçao claims cannot be checked by the means the regulator intends. Fees, meanwhile, are not secret: a B2C application costs a one-time non-refundable EUR 4,592, and the total annual B2C fee is EUR 47,450, payable in full by 15 January.

The Cheap Plentiful and Disputed Anjouan Market

Anjouan, a constituent territory of the Union of the Comoros, is where a great many thin-affiliate casinos end up. Its framework rests on legislation adopted in 2005, including the Anjouan Computer Gaming Licensing Act, and the published fee schedule is EUR 17,828 for B2C licence issuance, one-time, with the same again on annual renewal, plus EUR 500 per additional domain or URL.

That price is the point. An ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around EUR 17,000 per licence per year, and that Comoros financial intelligence officials described Anjouan Corporate Services as operating illegally. The same investigation reported a former attorney-general of the Comoros calling the licensing operation "an illegal entity", and stated that the Anjouan Offshore Financial Authority was stripped of its status as a recognised regulator by Comorian banking laws passed in 2013 and 2015.

Anjouan Gaming disputes the framing, saying in a statement on 10 June 2026 that an Anjouan licence is not and has never been presented as a universal authorisation to operate in every country, and that no licensing authority can exempt an operator from local law where local authorisation is required. Fair enough as a statement of principle — and it is also the admission that matters here, because Great Britain requires local authorisation. A legal opinion of 19 September 2024, reconfirmed in February 2026, is said to confirm the regulator's lawfulness; that comes from a licensee's own statement rather than a primary source, so treat it as a claim.

The verification framework is at least concrete. Certificates carry a unique licence number and a QR code linking to the public register, and the authority says certificates that cannot be verified through the public register should not be relied upon as evidence of licensing status. On the standards side, published rules require segregated player funds, independently certified random number generators, AML controls and age verification — the same promises a UK licence makes enforceable.

Kahnawà:ke, Malta and the Ones With No Licence at All

The Kahnawà:ke Gaming Commission has regulated interactive gaming since its Regulations were enacted on 8 July 1999 and describes itself as having done so longer than almost any other jurisdiction. Its structure is unusual: the Interactive Gaming Licence is held by one entity at a time — Mohawk Internet Technologies since 1999 — and operators below it hold Client Provider Authorizations. There is no limit on how many it may issue. The Logo Certificate Program lets a player click the Commission's logo to generate a Certificate of Good Standing confirming whether a site holds a valid permit, which is a genuinely useful check. Fees rise on 1 January 2027: the CPA application fee from USD 35,000 to USD 40,000. And permits are suspended in public — a CPA held by Polar Ventures SDRL was suspended effective 29 September 2026 following a Show Cause Notice.

Malta is the respectable-looking one. A Malta Gaming Authority B2C licence requires a one-time non-refundable application fee of EUR 5,000, a fixed annual licence fee of EUR 25,000 and gaming tax at 5 per cent of gaming revenue from the service. Minimum paid-up share capital is EUR 100,000 for Type 1 and Type 2 licences. The MGA also publishes a list of Unauthorised URLs, declaring it has no connection with those domains and that any reference to the MGA or a Maltese licence on them is false and misleading — entries carrying notice dates of 30 October 2026.

An MGA licence is a real licence. It is still not a Gambling Commission licence, so it buys a UK player no statutory protection, no GamStop check and no access to the Commission's dispute route. And then there is the bottom of the market: Costa Rica, which does not operate a comprehensive gambling licensing regime at all. The "data processing license" sometimes cited in the industry is not a licence in the strict legal sense. Its Legislative Assembly rejected Bill No. 25,057 in early 2026, which would have introduced a mandatory licensing regime. There is nothing there to check, and a site naming it is telling the truth about how little stands behind it.

Licences Side by Side

The table below compares the licence regimes an offshore site typically names, on the criteria that decide what happens when something goes wrong. A number here and a number in the text are the same number.

Read the fourth column and the last one together. A dispute route is not a formality; it is what remains when a withdrawal stalls and the operator stops answering. Anjouan requires its licensees to designate an approved ADR provider, list it in player-facing terms and resolve complaints within 30 days before a player may escalate — that is a real structure, on paper. Kahnawà:ke employs a full-time Dispute Resolution Officer. Curaçao specifies no dispute route for a Great Britain player at all, which is worth remembering given how many sites rely on it.

Notice also what a GamStop column of "No" would mean in practice for someone on the register. Self-exclusion holds for its full term — six months, one year, five years or five years with auto-renewal — and it stays in place after the chosen period ends until the person contacts GamStop to remove it. Registering cannot be cancelled or deactivated during the term, and GamStop Online registrations cannot be removed early at all. An offshore site is not a route around that arrangement; it is simply a place where the question is never asked.

Identity Checks That Decide Everything

If one mechanism decides how an offshore casino feels to use, it is identity verification — and the difference between a licensed site and an unlicensed one shows up here more sharply than anywhere else.

A Great Britain-licensed operator must obtain and verify information establishing a customer's identity before that customer is permitted to gamble. Licence Condition 17, introduced on 7 May 2019, requires the information to include the customer's name, address and date of birth. Before permitting a deposit, the licensee should tell customers what types of identity documents or information they may need to provide, in what circumstances, and in what form.

In practice, most UK sites do this instantly at registration by matching an account against databases such as credit reference agencies and the electoral roll, in which case no documents are needed. That is the first-time experience: a name, an address, a date of birth, a few seconds, done. The Commission expects identity and age checks to be brought forward to before a customer deposits or stakes at all, and has criticised onboarding on incomplete or inaccurate information — initials instead of full names, nicknames, commercial addresses instead of residential ones.

Under anti-money-laundering rules there is a second layer. In remote casinos, identification and verification are required when a customer deposits funds to take part in remote gambling, or withdraws such funds or winnings, amounting to €2,000 or more. The threshold applies both to a single transaction and to transactions that appear to be linked — linked, for example, where they are carried out by the same customer through the same game or in one gaming session, or form part of overall activity during a single logged-on period. A remote casino may identify a customer and verify their age at registration but defer full verification until the €2,000 threshold is triggered; the Commission calls that the hybrid approach.

Later, things change. Verification becomes ongoing and may need updating when circumstances or personal details change. For higher-risk accounts an operator must also establish source of wealth, and may ask for bank statements to check that source of funds are legitimate, or for an explanation of irregular income patterns such as a pending house sale.

The Warning Signs

The ugly version of this is what the Commission has been complaining about for years: an operator that asks for nothing at deposit and everything at withdrawal. Over a quarter of the complaints reaching the Commission's Contact Centre concern identity verification, a concern customers raise when they are asked for documents only on attempting to withdraw — and it is one of the most common dispute types referred to ADR providers.

Licence Condition 17.1.1 addresses exactly that. A customer's withdrawal request must not result in a requirement for additional information if the licensee could reasonably have requested that information earlier. The prohibition does not prevent a licensee seeking information it must obtain at that time under another legal obligation, such as an anti-money-laundering requirement — and where a business delays a withdrawal because of insufficient ID it may be in breach of Licence Condition 17 and face regulatory action.

On the enforcement side, one licensee agreed a £900,000 regulatory settlement on 21 October 2026 for failures including unnecessarily delaying consumer withdrawals. The specific failures included a term stating customers could request only one withdrawal at a time and could not request another until the original was authorised — found unfair under the Consumer Rights Act 2015 — and manual review of every fifth or tenth withdrawal for some customers, which led to extra information being required before withdrawals were processed.

That is a licensed operator, subject to the LCCP, with a regulator watching. The warning signs are the same offshore, with none of the backstop:

• Nothing is asked at deposit, everything is asked at withdrawal. In the UK that is a licence breach. Offshore, the request for documents at the moment of cashing out is often the transaction itself.
• The identity requirements keep moving. A Great Britain-licensed operator is expected to say in advance what documents may be needed. A requirements list that appears only once there is money to release is a negotiating position, not a check.
• The site will not say what happens to money already deposited. Un-staked deposits remain the customer's under UK guidance, and operators may not confiscate or deduct any part of a deposit balance on the basis that a customer has failed identity or age verification. Offshore, no such rule applies.
• Middle names and nicknames in the account record. The Commission has warned that onboarding with a middle name instead of a forename can create mismatches with records held elsewhere, such as GamStop, undermining self-exclusion altogether.
• Fuzzy matching by a third-party verification provider. The Commission has expressed concern about operators onboarding customers on partial or equivocal verification. It is a way of looking compliant while holding nothing that would survive an actual dispute.

Five Signs an Offshore Operator Can Be Trusted

Trust here is relative. Nothing below makes an unlicensed site safe, because nothing below replaces a Gambling Commission licence. But the difference between a business that keeps its paperwork and a domain that was registered last Tuesday is visible, and these are the things to look at.

The Licence Certificate Names the Site You Are On

A licence claim is only worth what it can be checked against. Curaçao issues a Certificate of Operation Seal for a specific approved player-facing domain, and clicking it must redirect to its verification address; if the certificate behind it shows a different domain, you are looking at another operator's paperwork. Anjouan certificates carry a unique licence number and a QR code linking to the public register, and the authority's own position is that a certificate which cannot be verified through the register should not be relied upon. A quick check: open the certificate, read the domain, compare it to the address bar.

There Is a Named Regulator With a Public Enforcement Record

A regulator that publishes who it has suspended is a regulator doing something. Kahnawà:ke keeps a permit-holder list and lets a player click its logo to generate a Certificate of Good Standing, and it suspended a Client Provider Authorization effective 29 September 2026. Malta publishes Unauthorised URLs and states that any reference to an MGA licence on them is false and misleading. A quick check: search the regulator's own site for the operator's name, not the operator's site for the regulator's logo.

The Terms State How Long a Withdrawal Takes and Why It Might Not

Read the withdrawal clause before depositing, not after. A serious operator will say what happens if extra checks are needed, and will not bury a term that limits how often you may request a payout. That last one is instructive: a term allowing only one withdrawal at a time, with no second request until the first is authorised, was found unfair under the Consumer Rights Act 2015 in a 2026 settlement. A quick check: search the terms page for the words "one withdrawal" and "processing".

There Is a Complaint Route With a Name Attached

If the terms name an approved dispute-resolution provider, the operator has somewhere to send a dispute and a reason not to have one. Anjouan requires a designated ADR provider with contact details published in player-facing terms; the approved list currently includes EGIS ADR, Axion ADR, iGaming ADR and an approved ADR provider. A quick check: find the ADR provider's own website and confirm it accepts disputes about the operator you are looking at, not just the sector.

Player Funds Are Described Honestly, Including the Word "Protected"

Separate client accounts are not the same as protected money. Under UK rules a business must pick one of three customer-funds protection ratings — "not protected", "medium protection" or "high protection" — state which in its terms, and remind customers every six months if their funds are not protected if it becomes insolvent. Keeping funds in a separate account does not mean customers get them back if the business fails, and offshore businesses may hold customer money overseas. A quick check: read the customer-funds clause and see whether it uses a protection rating or a comforting sentence.

What to Check Before You Deposit

These steps are lawful and ordinary. None of them involves evading anything, and all of them take less time than a withdrawal dispute.

1. Look the operator up on the Gambling Commission's public register. The Commission advises consumers to check before gambling whether a business holds a British licence, and to click through to the register to see whether the site's activities and domain names match. The reason: if it is not on the register, nothing else on this page protects anyone.
2. Open the licence certificate and read the domain. A seal that links nowhere, or a certificate showing a different website, is the single clearest sign that the licence claim is decorative. This takes thirty seconds and rules out most of the market.
3. Read the withdrawal clause in full before depositing. Look for a stated processing time, any cap on how often a withdrawal may be requested, and what triggers extra checks. UK rules ban a maximum limit on what a consumer may withdraw from their deposit balance — offshore terms frequently impose one.
4. Check whether the site says which ADR provider handles disputes. A named provider with a published process means a dispute has somewhere to go. No named provider means the only remedy is a conversation with the operator's support desk, which is not a remedy.
5. Confirm the customer-funds disclosure. The terms should say whether funds are protected in the event of insolvency, at what level, and by what method. If the clause is vague, assume the answer is "not protected" and that a separate bank account is being passed off as a guarantee.
6. Set the protections that do not depend on the operator. Bank gambling blocks decline payments to merchants categorised under gambling Merchant Category Codes, and the Commission's list of banks offering one, last updated 16 October 2026, names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling. Blocks are applied at card level, so each card must be activated separately, and most banks use a 48-hour or 72-hour cooling-off period before gambling transactions are allowed again.

On blocking software, the picture changed in 2026. GamStop signposts Gamban and BetBlocker, and BetBlocker states it blocks over 1,368,000 gambling websites and 3,100 apps, requires no registration and is free worldwide. Gamban states it blocks licensed and unlicensed sites and that its protection is designed to be as difficult to remove as possible. But TalkBanStop, its free UK licence scheme, ended on 31 March 2026: Gamban is free for residents of Wales, while in England and Scotland it costs £4.99 per month or £29.99 per year after a 7-day free trial. That is a real cost and a real gap, and it is worth knowing before relying on it.

If gambling is causing harm, the National Gambling Helpline is operated by GamCare and is free on 0808 8020 133, 24 hours a day, every day of the year; the same number reaches live chat and WhatsApp, and callers in Wales are given 0808 2819 265. GamCare provides information, advice and support across England and Scotland through the Helpline, live chat, WhatsApp and Facebook, plus a peer-support chatroom and forums. The Helpline is not a crisis line, and staff cannot transfer callers at immediate risk of harm — they follow their own safeguarding procedures. NHS England has opened 15 specialist gambling clinics across England since 2019, seven of them in the year to December 2024, and the NHS National Gambling Clinic at 69 Warwick Road, London SW5 9HB takes self-referrals and accepts young people aged 13 to 18 from anywhere in England.

What the Regulator Does About Unlicensed Sites

The phrase "not on GamStop" is a search term, not a category of business. Behind it sits a real market, a real harm and a regulator working the edges of it: 586 illegal sites accessible to GB consumers in September 2026, 3,140 disruption notices since April 2024, an average 32 per cent fall in engagement across 160 sites, and one prosecution commenced in a whole year.

That last number is the honest one. The Commission is not closing these operations down faster than they open; it is raising the cost of running them, domain by domain and registrar by registrar, and it is better at that than the prosecution statistics suggest. The most effective tools in its own data are registrar blocks and suspensions at 91 per cent, and GEO IP blocking at 60 per cent. The least effective is removing a site from search, at 30 per cent on Google and 8 per cent on Facebook — which is precisely the measure people notice, because the site disappears from the results while the site itself stays up.

Do UK rules apply to an online casino not on GamStop?

No. Under section 33 of the Gambling Act 2005 it is an offence to provide facilities for gambling without an operating licence, and it is immaterial whether the facilities are provided wholly or partly by remote communication or inside or outside the UK. The Commission states plainly that offering commercial gambling services to consumers in Great Britain without a licence is illegal, including where the operator holds a licence elsewhere. The crime is the operator's, not the player's.

Are there uk online casinos not on GamStop that are legal to play at?

There are no legal ones, only licensed ones elsewhere. A licensed operator must be part of GamStop as a licence condition, so an unlicensed site is by definition outside it. A Malta Gaming Authority licence is a genuine licence, but it is not a Commission licence and buys no statutory protection in Great Britain. The Commission's advice is to check the public register and confirm the site's activities and domain names match.

Is a new online casino not on GamStop ever worth trying?

Rarely, and never on the strength of the licence alone. Novelty is cheap: the Anjouan fee schedule charges EUR 500 per additional domain, which tells you what a new front end costs. The things worth reading are unglamorous — whether the certificate names your domain, whether withdrawal terms state a processing time, whether player funds have a stated protection level. If none of those can be answered, the site has told you its business model.

Do online casinos not on GamStop sites offer free spins with no deposit?

They do, and the terms are where the offer lives. A no-deposit bonus is usually capped on cashout, needs playthrough before anything is withdrawable, and sits under a maximum bet rule while the requirement runs. In Great Britain, wagering requirements on bonus funds have been capped at a maximum of ten times since 19 January 2026, and mixed-product promotions requiring two or more types of gambling are banned. Offshore sites are bound by neither.

Can a UK player complain if an offshore casino withholds winnings?

Only to the operator, and then to whichever dispute body its licence names. Anjouan requires licensees to designate an approved ADR provider, publish its details in player-facing terms and resolve complaints within 30 days before a player escalates. Kahnawà:ke employs a full-time Dispute Resolution Officer. The Commission is a regulator, not an ombudsman: it cannot resolve individual complaints or get money back, though it records them and typically refers disputes elsewhere.

What is the best online casino not on GamStop, if any has to be named?

None deserves the word, and I will not pretend otherwise. "Best" would mean the most reliable place to be paid, and reliability here is measured by paperwork that can be checked: a verifiable certificate, terms that state a withdrawal time, a named ADR provider, an honest customer-funds clause. The great majority of illegal sites the Commission monitors fail on at least one of those, and a third of them, on average, lose a third of their traffic once it acts.

The Short Version

Offshore casinos are not licensed in Great Britain, they cannot check GamStop, and the Gambling Commission treats them as illegal operators rather than as an alternative to regulated ones — which is why the enforcement numbers read the way they do: 3,140 disruption notices since April 2024 against a single prosecution commenced in the year to March 2026.

If any of this is close to home, the National Gambling Helpline is free on 0808 8020 133, 24 hours a day, every day of the year.