New casinos not on GamStop are offshore sites that sit outside the British licensing system, so a dispute with one cannot go to a UK regulator, an approved ADR provider or the courts in the same straightforward way. What a player keeps is the operator's own complaints procedure and, sometimes, a foreign licensing authority.
Every year a few thousand people go looking for a casino that the self-exclusion scheme does not cover, and every year a slightly different set of websites presents itself as the answer. The pitch is newness: a fresh brand, a fresh licence, a fresh bonus ladder. The name in the search box spells the scheme "gamestop" as often as not, which tells you how casually the whole subject is approached. I have spent years reading the paperwork behind these launches, and the interesting question is never the bonus. It is what happens on the day something goes wrong: which authority has jurisdiction, which body will read the file, and who, in the end, decides.
That question has never mattered more, because the offshore market itself is in flux. Curaçao tore up its old master-licence system and now licenses operators directly; Anjouan churns out hundreds of certificates a year under a regulator whose status is disputed; a batch of legacy seals went dead in October 2025. A new casino's licence is often newer than the site's own terms and conditions, and the two do not always agree.
On the British side the standards are not in doubt. Since 31 March 2020 every online operator holding a Gambling Commission licence must belong to GamStop as a condition of that licence, under social responsibility code provision 3.5.5. From April 2020 they must also check their whole customer base against the register at least once every 24 hours. Offshore sites are not licensed in Great Britain, UK protections do not apply to them, and they are not connected to the scheme. For players for whom gambling stops being enjoyable, the National Gambling Helpline is free on 0808 8020 133, 24 hours a day, and GamCare runs it.
Table of Contents9
- What the Numbers Say About the Offshore Market in 2026
- GamStop's Own Register A Benchmark Worth Quoting
- British Licence First, Offshore Licence Second
- Where Each Route Puts a Dispute
- The Licence Is the Whole Argument
- Five Signs a New Casino Can Be Trusted
- How to Check a New Site Before You Deposit
- Questions About New Casinos Not on GamStop
- Understanding New Casinos Not on GamStop
What the Numbers Say About the Offshore Market in 2026
The Gambling Commission's own analysis, published 5 November 2026 and covering April 2025 to April 2026, found that 0.6 per cent of respondents across the whole population had engaged with an illegal gambling website in the past four weeks, with a further 0.4 per cent in the past twelve months. Restricted to people who had gambled online in the previous four weeks, that rose to 2.5 per cent, plus 1.5 per cent in the past year. Small percentages, large country.
The commercial estimates are wilder and should be handled with tongs, because almost all of them are produced by somebody with a stake in the answer. H2 Gambling Capital puts stakes with illegal operators at £16.6 billion in 2025, up from about £5 billion in 2019, and reckons the legal share of British gambling fell from 97 per cent to 92 per cent over the same stretch. A study by Frontier Economics for the Betting and Gaming Council settled on £2.7 billion staked annually online on the black market, 2.1 per cent of the total. Yield Sec, working for the Campaign for Fairer Gambling — the other side of the same argument — calculated £8.8 billion in gross gambling revenue for 2025, split 91 per cent regulated and 9 per cent unregulated. Three methodologies, three answers, one shared interest in the number being large.
What is not in dispute is enforcement. Since April 2024 the Commission's Illegal Markets team has issued 3,140 cease and desist and disruption notices, referred 447,778 Bing and Google URLs and secured 287,961 removals. Across 160 illegal websites with traffic data, engagement fell by an average of 32 per cent after disruption. By method, registrar blocks and website suspensions produced the largest average falls at 91 per cent each, ahead of GEO IP blocking at 60 per cent, Bing removal at 52 per cent, Google removal at 30 per cent and Facebook removal at 8 per cent. A search-engine delisting makes a site hard to find, but it does not stop the address being typed.
The market underneath all this is not small either. Total British gross gambling yield was £17.5 billion in the year to March 2026, and the remote casino, betting and bingo sector accounted for £8.3 billion of it.
GamStop's Own Register A Benchmark Worth Quoting
The most useful checkable number on this whole subject comes from the scheme itself. In the first half of 2026 GamStop Online reported a 16 per cent year-on-year increase in registrations, with May 2026 setting a monthly record of 12,236 sign-ups. As of July 2026 it reported 614,738 people currently on the register, of whom more than one in two had chosen the maximum five-year exclusion, while only one in four had gone for six months. Under-25s accounted for nearly one in three of all exclusions in that half-year, a 26 per cent year-on-year rise.
Why quote it here? Because the register is the single largest population of people that a "not on GamStop" casino is implicitly addressing, and its growth is the commercial story behind the launches. For 2025 the scheme recorded 117,756 new registrations and had 561,983 active exclusions at year end, with 58,675 of those registrations arriving in the final six months — an average of 319 a day. The gender split in its 2025 annual report was 94.3 per cent male and 5.7 per cent female.
One detail from the scheme's own terms deserves a paragraph of its own, because it is widely misunderstood. An exclusion holds for its full chosen term — 6 months, 1 year, 5 years or 5 years with auto-renewal — and it then stays in place until the person contacts GamStop to remove it. It cannot be cancelled early. If it is not deactivated after the chosen period, the scheme holds the data through a further automatic seven-year self-exclusion period during which operators are told the person was previously excluded. Auto-renewal itself may only be switched off in the last six months of a five-year minimum period, and otherwise continues for up to four further five-year terms. There is no early exit, and an offshore site is not a way round any of it.
British Licence First, Offshore Licence Second
British-licensed operators are the standard of comparison, and the reason is procedural rather than moral. A complaint against a Commission licensee has to be referred to an approved ADR entity free of charge if it is not resolved within eight weeks, under social responsibility code provision 6.1.1. The approved list runs to ADR Group, Pegasus ADR Service, CEDR, eCOGRA, IBAS, ProMediate and Tattersalls Committee, and the operator picks from it. IBAS handled 3,721 domestic disputes in 2024-25 with an average completion time of 20 days and reported 100 per cent operator compliance with decisions in the consumer's favour in both that year and the previous one. eCOGRA, for the year to 30 September 2025, recorded 911 disputes, of which 150 valid ones concerned deposits and withdrawals, with an average domestic resolution time of 31 days and 17.8 per cent ruled in favour of the consumer. Roughly one in five, in other words. It is a route with an end, and sometimes the end is not the one the player wanted.
The offshore routes vary enormously, and it is worth knowing which kind a new site has bought.
Curaçao Direct Licences and Dead Seals
The National Ordinance on Games of Chance took effect on 24 December 2024 and made the Curaçao Gaming Authority the direct licensing and supervisory authority. The old master-licence and sub-licence model is gone, along with the four private master licensors, whose licensing activities ceased between 18 August 2024 and 31 January 2025. The legacy "orange" sub-licence certificates ended on 15 October 2025. A historic /JAZ number is no longer evidence of anything current.
The fees are public and modest for a jurisdiction of this reach: a one-time non-refundable EUR 4,592 application fee for a B2C licence, plus EUR 150 per ultimate beneficial owner, and a total annual charge of EUR 47,450 divided into a EUR 24,490 licence fee and a EUR 22,960 supervisory fee, payable in full by 15 January. Verification has a hard rule: clicking a Certificate of Operation seal must redirect to cert.cga.cw, and if the certificate behind it names a different domain from the one being visited, the seal belongs to another operator. There is a complication worth flagging — on 7 October 2026 the authority said its previous online gaming portal would not return to service and that it was working on an alternative way to verify licensed domains, because the former digital seal may be affected by the transition.
Anjouan Cheap Plentiful and Contested
Anjouan licenses internet gaming under legislation adopted in 2005, with the Anjouan Offshore Financial Authority named as the competent authority and Anjouan Licensing Services Inc. as sole authorised licence administrator. A B2C licence costs EUR 17,828 to issue and the same to renew each year, with EUR 500 per additional domain.
The regulator states that an independent legal opinion of 19 September 2024, reconfirmed in February 2026, confirms the AOFA is lawful; that is the licensee's own statement and I treat it as unconfirmed. Against it sits an ABC News investigation published on 31 December 2025, which reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around EUR 17,000 each per year, that Comoros financial intelligence officials described Anjouan Corporate Services as operating illegally, and that a former attorney-general of the Comoros called the licensing entity "an illegal entity". Anjouan Gaming's own statement of 10 June 2026 conceded the obvious: a licence is "not, and has never been presented as, a universal authorisation to operate in every country in the world". Operators must designate an approved ADR provider — EGIS ADR, Axion ADR and iGaming ADR are the current list — and are expected to resolve complaints within 30 days before a player may escalate.
Kahnawàke Old Small and Contractual
The Kahnawà:ke Gaming Commission has regulated interactive gaming since its Regulations of 8 July 1999 and issues a single Interactive Gaming Licence, held by Mohawk Internet Technologies since 1999, with operators holding Client Provider Authorizations beneath it. A CPA application fee rises from USD 35,000 to USD 40,000 on 1 January 2027, and the annual CPA fee remains USD 20,000. The Commission's Logo Certificate Program lets a player click the logo to generate a Certificate of Good Standing. Two features distinguish it: sites must allow a player to set limits including zero, and the Commission's own voluntary self-exclusion is permanent and irrevocable, with funds forfeited to a third-party charity if a self-excluded player breaches the prohibition. It also employs a full-time Dispute Resolution Officer. A small jurisdiction, but one with a paper trail.
Malta The Route to a European Licence
The Malta Gaming Authority requires a B2C licence for a Maltese or EU/EEA entity offering a gaming service from Malta or through a Maltese entity. Fees are a one-time EUR 5,000 application charge, a fixed annual licence fee of EUR 25,000 and gaming tax at 5 per cent of gaming revenue, against minimum paid-up share capital of EUR 100,000 for Type 1 and Type 2 licences. The MGA publishes a list of Unauthorised URLs and asks players to complain through its own form. It is not a British licence and does not pretend to be.
Costa Rica Not A Licence At All
Costa Rica has no comprehensive gambling licensing regime, and the "data processing license" that appears in marketing copy is not a licence in the legal sense. Its Legislative Assembly rejected Bill No. 25,057 in early 2026, which would have introduced a mandatory regime. Games of chance are generally prohibited under Costa Rican law, and only land-based casinos integrated into qualifying hotels are authorised. When a new casino's footer says Costa Rica, it is telling you there is no regulator to write to.
Where Each Route Puts a Dispute
The comparison that matters is not which licence sounds most impressive. It is what the mechanism does when a withdrawal stalls, an account is closed, or a bonus is voided. Here is how the routes differ by the criterion that actually governs the outcome.
| Route | First step when a dispute arises | Second step if unresolved | Typical time to a decision | Who decides | Cost to the player |
|---|---|---|---|---|---|
| UK Gambling Commission licence | Operator's internal complaints procedure | Approved ADR entity, free of charge, if unresolved in 8 weeks | IBAS average 20 days; eCOGRA average 31 days | Independent adjudicator; Commission receives but does not resolve | Free |
| Curaçao (CGA direct licence) | Operator's own complaints procedure | No consumer ADR scheme run by the authority | Not published | Operator, then whoever the terms name | Not published |
| Anjouan | Operator, with a 30-day window | A designated approved ADR provider named in the terms | 30 days before escalation | Approved ADR provider, privately contracted | Not published |
| Kahnawà:ke | Operator, under contractual terms | Full-time Commission Dispute Resolution Officer | Not published | Commission officer | Free |
| Malta (MGA) | Operator first | The MGA's complaint form | Not published | MGA reviews; may refer back | Free |
| Costa Rica | Operator's own terms | Nothing available | — | Operator alone | — |
Two numbers in that table are the same two quoted in the text above, and both come from the adjudicators themselves. Everything in the last column is free except where an operator's own terms provide otherwise, and note that the Commission cannot help: it is a regulator, not an ombudsman, and it will not resolve an individual complaint or get money back. That is exactly why the dispute route should be checked before any deposit.
The Licence Is the Whole Argument
If one thing decides everything else about a new casino not on GamStop, it is the licence, and the licence is not what the badge in the footer says. What matters is whether the authority that issued it exists, supervises the operator, and can be reached by a customer.
The first time a player deals with it is usually invisible. Under British rules, a remote casino may identify a customer and verify their age at registration but defer full identity verification until the €2,000 threshold is triggered — the Commission calls it the hybrid approach — though since 2019 licence condition 17 has required the customer's identity to be verified before they are permitted to gamble, and the Commission now expects checks to be brought forward to before a deposit. Companies can often verify by matching against credit reference agencies and the electoral roll, in which case no documents are ever needed. Offshore, the sequence is usually the reverse: registration is instant and cheerful, and the document request arrives at the point of withdrawal, which is when the leverage sits with the operator rather than the player.
Later, the pattern changes. Checks become ongoing and may be refreshed when circumstances change, and higher-risk accounts may be asked for source of wealth. Over a quarter of complaints reaching the Commission's Contact Centre concern identity verification — a concern, the Commission says, customers raise when they are asked for documents only on attempting to withdraw. British rules confront that directly: licence condition 17.1.1 says a withdrawal request must not trigger a demand for information the licensee could reasonably have requested earlier, and a business that delays a withdrawal for want of ID may be in breach. Offshore, there is no such prohibition. The request can arrive whenever the operator likes, and it can arrive after a win.
Warning signs are consistent. A licence number that resolves to a different domain than the one on screen. A seal that does not redirect to the authority's own verification page. A licence paragraph that names an entity rather than an authority. Terms that reserve the right to void winnings at sole discretion — the Commission treats exactly that wording as unfair, and a firm was fined £170,000 in July 2025 in a case that included such a clause. A complaints clause that names no ADR provider at all. A term that quietly caps how much may be withdrawn from bonus winnings, as the offshore examples do at 300 per cent of the credited bonus.
Five Signs a New Casino Can Be Trusted
Trust here is not a feeling about a website's design. It is a set of documents that either exist or do not, and each can be checked in a couple of minutes before any money moves.
The Regulator Exists and Answers for the Operator
Take the licence number from the footer and look it up on the authority's own site or public register, not on the casino's. A Curaçao licence should be verifiable through the CGA's register, and the CGA's own certification policy says clicking a Certificate of Operation seal must redirect to cert.cga.cw. If the certificate names a different domain, stop. For Kahnawà:ke, the Logo Certificate Program generates a Certificate of Good Standing on the spot.
The Complaints Clause Names a Named Adjudicator
Read the terms for a dispute section that names a specific ADR provider and gives its contact details, as Anjouan requires of its licensees. A clause promising to "consider any complaint fairly" names nobody and decides nothing. For comparison, a British licence obliges the operator to offer free ADR after eight weeks, which is why the four-figure dispute totals at IBAS and eCOGRA can be published at all.
The Withdrawal Terms Are Concrete and Short
Look for a stated processing time and any fee, in the terms rather than the marketing page. Watch for one-withdrawal-at-a-time clauses and for periodic manual reviews of every fifth or tenth withdrawal; both featured in a £900,000 regulatory settlement announced on 21 October 2026, where the first was found unfair under the Consumer Rights Act 2015. If the casino is offshore, there is no equivalent finding to appeal to — only the terms as written.
The Bonus Rules Are One Number, Not a Ladder
Find the wagering multiple and read it as a single figure. British licensees have been capped at ten times bonus funds since 19 January 2026, and mixed-product promotions requiring two or more gambling types were banned on the same date. Offshore multipliers typically run far higher, with maximum cashout limits attached. If the headline is "400 per cent" and the small print says 40x with a cap on winnings, the offer is the small print.
The Identity Check Happens Before, Not After
A site that verifies identity at sign-up is telling you it intends to pay. One that asks for documents only when a balance is requested is using the withdrawal as a negotiation. British licence condition 17.1.1 exists to stop exactly that pattern, and the Commission has said onboarding customers on partial verification — initials instead of full names, a middle name in place of a forename — can create mismatches with records held elsewhere, including the self-exclusion register, which quietly undermines the whole point of it.
How to Check a New Site Before You Deposit
Six steps, in order, and none of them requires an account or an email address.
- Verify the licence on the authority's register. Why: the footer badge is marketing, the register entry is the fact, and a mismatch between the domain on the certificate and the domain in front of you is the single clearest fraud signal in this market.
- Read the complaints section and write down the adjudicator's name. Why: if a dispute arises, the only question that will matter is who has the standing to decide it, and that answer must exist before you need it.
- Find the withdrawal section and note the processing time, the fee and any per-withdrawal limit. Why: charges and limits are legitimate only when they are clear before you deposit, and offshore sites are not bound by the British rules on fair terms.
- Reduce the bonus to one figure: the wagering multiple, plus any maximum cashout. Why: the headline percentage is irrelevant next to what must be wagered and what may actually be withdrawn, and the two figures together are the real value of the offer.
- Check the identity requirement and when it bites. Why: a site that verifies at registration carries the cash-flow risk; a site that verifies at withdrawal hands that risk to the player.
- Set your own limits before you play, and consider a bank gambling block. Why: eleven banks on the Commission's list, last updated 16 October 2026, will decline gambling transactions at card level, with a 48-hour or 72-hour cooling-off before transactions are allowed again, and blocks do not affect a credit score. Blocking software such as BetBlocker or Gamban sits alongside it.
Questions About New Casinos Not on GamStop
Are new online casinos not on GamStop legal to use?
The operator is the one committing the offence, not the customer. Section 33 of the Gambling Act 2005 makes it illegal to provide gambling facilities without an operating licence, and the Commission states plainly that offering commercial gambling services to British consumers without its licence is illegal, including where the operator holds a licence elsewhere. A player is not prosecuted under section 33, but the practical consequence is that when something goes wrong, no British authority's rules protect the money.
Why does a brand new casino not have a UK licence yet?
Because the British route is slow, expensive and conditional. A Commission licence brings a statutory levy of 1.1 per cent of previous-year gross gambling yield for online operators, the bonus cap of ten times wagering in force since 19 January 2026, financial vulnerability checks at a £150 net deposit threshold, and mandatory participation in the self-exclusion scheme. Unsurprisingly, operators that want none of that incorporate elsewhere and buy a licence for EUR 17,828 in Anjouan or EUR 47,450 a year in Curaçao, then market to Britain from outside it.
Does a new casino not on GamStop get round self-exclusion?
No. Self-exclusion registered with the scheme applies to companies licensed in Great Britain, and it holds for its full chosen term — six months, one year, five years or five years with auto-renewal — after which it remains in place until the person contacts GamStop to remove it. An operator outside the British licensing system is not connected to the scheme, so its site simply sits outside the block. That is a gap in coverage, not an exemption, and it is the reason the Commission's January 2025 warning notice told licensees their games were turning up on unlicensed sites largely targeting people who had self-excluded.
Is a new pay by phone casino not on GamStop safer?
No. Payment convenience is not a protection. Phone billing reaches a gambling merchant through a payment provider, and British licence condition 5.1.2 requires licensees to accept payment only from a provider recognised under the Payment Services Regulations 2017 — a rule offshore operators are not bound by. The withdrawal, meanwhile, usually runs back through the same intermediary over several working days, which is precisely the window in which a document request can arrive.
Can I complain to the UK Gambling Commission about an offshore casino?
You can report it to the Commission, and it is worth doing because reporting feeds the disruption work, but it cannot decide your case. The Commission is a regulator, not an ombudsman: it cannot resolve individual complaints or recover money. Reporting an unlicensed operator to the Commission, and escalating a licensing dispute to the issuing authority, are separate actions with separate purposes, and only the second is capable of returning anything.
How often are offshore casino licences actually removed?
Rarely enough that removal should not be part of anyone's plan. Between April 2025 and March 2026 the Commission commenced a single prosecution, in October to December 2025, and reported zero or one per quarter across that year. Enforcement instead runs through disruption: in the quarter July to September 2026 it referred 1,835 websites to search engines and issued 546 cease and desist notices. Its own assessment is that registrar blocks and GEO IP blocking work better than search-engine removals, because a delisted site becomes harder to find without becoming unreachable.
Understanding New Casinos Not on GamStop
A new casino not on GamStop is really a choice about jurisdiction, and the sensible version of that choice starts with the complaints clause rather than the welcome offer. The numbers give the short answer: the register reached 614,738 people by July 2026, illegal-site engagement fell by an average of 32 per cent where disruption landed, and the British route offers a free adjudicator with published times to a decision — IBAS at 20 days, eCOGRA at 31 — while the offshore routes offer the operator's own terms and, if you are lucky, a foreign regulator's form. Help, if it is ever needed, is free on 0808 8020 133, 24 hours a day.
