UK Casinos Not on GamStop: Where a Complaint Goes When the Licence Isn't British

A casino not on GamStop holds no Gambling Commission licence, so the UK's protections do not apply to it. GamStop is free and blocks UK-licensed sites for between six months and five years. Offshore sites sit outside that scheme, and complaints about them cannot go to the Commission or to a UK adjudicator.

The phrase "not on GamStop" is usually read as a promise, and my trade has done a great deal of work helping people read it that way. The promise is straightforward enough: a casino that does not sit under the Gambling Commission's licence, and therefore is not wired into the national self-exclusion scheme. Anything found by searching for a UK casino not on GamStop is, by definition, licensed somewhere other than Great Britain.

That "somewhere other" is the entire story. Since 31 March 2020 every operator holding a Gambling Commission licence has had to participate in GamStop under social responsibility code provision 3.5.5 of the Licence Conditions and Codes of Practice. There are no British-licensed exceptions – which means the whole category this page describes is, from the regulator's point of view, one thing: unlicensed in Great Britain. Section 33 of the Gambling Act 2005 makes it an offence to provide gambling facilities without an operating licence, and the Commission states that this includes an operator holding a licence in another jurisdiction. The offence is the operator's, not the player's, and the Commission has said so since at least 2024. Its Illegal Markets team issued 3,140 cease-and-desist and disruption notices between April 2024 and October 2025, and where it caught two operators that had not integrated the scheme by the 31 March 2020 deadline, it suspended their licences on 3 April 2020. None of that makes the customers of such sites criminals. It does determine which door a complaint can be knocked on, and that is what this page is really about. The sites exist, are easy to find, and are regulated by somebody else; the question is whether "somebody else" can decide anything on your behalf.

What GamStop Is, and Why the Name Gets Typed Wrong

GamStop Online – renamed from GAMSTOP in November 2025, when the betting-shop scheme formerly called MOSES became Gamstop Betting Shops – is the UK's national online self-exclusion scheme, run by The National Online Self Exclusion Scheme Limited. It has been available to consumers since 27 April 2018, and it is often typed "gamestop", which is a fact about the name and nothing more. Registration is free and takes a few minutes, though the block can take up to 24 hours to bite. You choose six months, one year, five years, or five years with auto-renewal, and there is one term of the deal that matters more than any other: [self-exclusion cannot be cancelled or deactivated during the period, and it stays in place after the chosen term ends until the person contacts GamStop to have it removed]{.ed}. Auto-renewal can only be switched off in the last six months of a five-year term, and if nothing is done the scheme holds the record through a further automatic seven-year period.

The scale is worth pausing on. GamStop recorded 117,756 new registrations in 2025 and held 561,983 active exclusions at 31 December 2025; by July 2026 that figure was 614,738, and more than one in two of those people had chosen the maximum five years. Of the periods selected during 2025, 29% picked six months, 24% a year, 25% five years and 22% auto-renewal – so roughly half the register is locked in for at least five years. A quarter of all registrants in 2025 were under 25. It is a large, deliberate, sticky commitment, freely entered into, and it is exactly the sort of thing that makes the phrase "not on GamStop" commercially interesting to somebody.

What "Not on GamStop" Actually Means

It means the site holds a licence somewhere else, or claims to. GamStop's own terms say the scheme blocks gambling websites and apps licensed in Great Britain only, and that it cannot prevent access to services run by organisations that do not participate. The obligations in the Licence Conditions and Codes of Practice bind Commission licensees; they do not reach an operator licensed only in Curaçao or Anjouan. That much is on GamStop's own site. The wider claim that offshore sites are therefore entirely outside the scheme is stated by trade and press sources rather than by a regulator page, though it is consistent with those terms – so, [reported to be true, and evidently so in practice]{.ed}.

The Gambling Commission's 20 January 2025 warning notice put the risk plainly: casino games supplied by licensed operators were appearing on unlicensed websites available to GB consumers, and such sites often target people who have self-excluded through GamStop and may have inadequate social responsibility and anti-money-laundering controls. That is the regulator describing the category rather than any particular brand. It is also, in my view, the single most useful sentence written about this market, because it names the mechanism instead of the villain.

Some players read this while excluded and look for a way around it, the exclusion does not end because a site is offshore, and it does not lapse at the end of the term. GamStop stays in place until the person contacts GamStop to remove it. Nothing here is a route past that, and no page that frames it as one is being straight with its readers.

The Regulators Behind These Sites, and What Each One Decides

Three licensing regimes appear again and again behind sites marketed to British players, and the honest comparison is not "strict" against "lax" but which body will actually answer a complaint, and how.

Curaçao has rebuilt its framework. The National Ordinance on Games of Chance took effect on 24 December 2024, making the Curaçao Gaming Authority the direct licensing and supervisory authority, and the old master-licence model is gone – the legacy "orange" sub-licence certificates ended on 15 October 2025, and a historic /JAZ number is no longer proof of anything current. The authority's own certification policy is unusually good for a player: clicking a Certificate of Operation Seal must redirect to cert.cga.cw, and if the certificate behind that seal shows a different domain from the one being visited, the site is displaying another operator's certificate. That check takes ten seconds and catches more than you would think.

Anjouan is the option that appears cheapest and most often. Its published fee schedule is EUR 17,828 for issue and the same again to renew. It requires licensees to segregate player funds, to use certified random number generators and to run AML and age checks, and to name an approved alternative dispute resolution provider in their terms – the approved list is EGIS ADR, Axion ADR, iGaming ADR and an operator, with 30 days allowed for the operator to resolve a complaint before escalation. But an ABC News investigation published 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around EUR 17,000 a year, and quoted a former attorney-general of the Comoros describing the licensing entity as "an illegal entity". Anjouan Gaming's own statement of 10 June 2026 concedes the principle: a licence is "not, and has never been presented as, a universal authorisation to operate in every country in the world". Note also its fee arithmetic against its volume – a regulator with 1,300 licensees and a small permanent staff is not inspecting many of them.

Kahnawà:ke is the oldest of the three, regulating interactive gaming since 1999, and the one with the most distinctive enforcement style. Operators must be hosted at Mohawk Internet Technologies. Its self-exclusion is permanent and irrevocable, and a player who breaches their own exclusion forfeits deposits and winnings to a charity chosen by the Commission. It employs a full-time Dispute Resolution Officer. It also has form on taking action against its own permit holders: a Client Provider Authorization held by one operator was suspended on 29 September 2026 following a show cause notice.

Malta is not offshore in the same sense – it is an EU regulator with serious requirements, including a EUR 100,000 paid-up share capital for Type 1 and Type 2 B2C licences – but an MGA licence is not a Gambling Commission licence, and sites holding only the former are outside GamStop. The MGA is also the one regulator here that publishes a list of Unauthorised URLs, warning that any claim of a Maltese licence on those domains is false; the most recent entries carried notice dates of 30 October 2026.

When the Gambling Commission states that it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where the operator holds a licence in another jurisdiction, it is describing all four of these arrangements at once.

Where a Complaint Can Actually Go

This is the part the affiliate pages leave out, and it is the section I would print and pin up.

Start with the middle row, because that is where the answer to "who decides it" actually lives. IBAS is a gambling specialist covering the remote, adult gaming centre, betting, bingo, casino and lotteries sectors, free to consumers, and its 2024-25 report records 3,721 domestic disputes with an average completion time of 20 days – and 100 per cent operator compliance with decisions in the consumer's favour in both 2023-24 and 2024-25. eCOGRA is approved across all sectors and reached 911 disputes in the year to 30 September 2025, of which 150 were valid "Deposits & Withdrawals" cases; it ruled for the consumer in 17.8% of completed disputes, and 72.3% of its invalid disputes had never been through the operator's own complaints procedure first. Both of those adjudicators are available only where the operator holds a Commission licence. That is the whole of the matter. An offshore operator's terms may name an ADR provider, and Anjouan requires it – but the route ends there, and there is no onward appeal to a British body.

For unscrupulous conduct rather than a disputed £300, the Commission will still record a report, and it refers illegal sites onward: since April 2024 it has referred 447,778 Google and Bing URLs and secured 287,961 removals, and it made its first referral to Visa in January 2025. That is enforcement against the business, not restitution for the customer. For anyone who needs help rather than redress, the National Gambling Helpline is free on 0808 8020 133, 24 hours a day, every day of the year, run by GamCare; callers in Wales have a separate number, 0808 2819 265. BeGambleAware is the public-facing brand of GambleAware and points to the same helpline and its online chat. Neither is a complaints service, and neither should be asked to be one.

The Role of Identity Checks

If there is a single mechanism that decides whether an offshore casino is workable for a British player, it is the identity check, and the way it is timed.

At a UK-licensed site, licence condition 17 has required since 7 May 2019 that identity be obtained and verified before the customer is permitted to gamble, and the Commission has pushed that earlier still: its August 2026 blog says onboarding on partial or inaccurate information – initials instead of forenames, nicknames, commercial addresses – is not sufficient, and warns that a middle name used in place of a forename can create mismatches with records held elsewhere, including GamStop. In practice the first check is usually electronic, matched against credit reference agencies and the electoral roll, and it happens in seconds at registration. Documents are requested only where that fails, and the Commission itself says it cannot give a timescale because the process varies.

Offshore, the timing is often reversed. The site takes the deposit without fuss and asks for the passport on the way out. That is not always sharp practice – an operator has to know who it is paying – but the incentive is obvious, and the Gambling Commission has been explicit that friction belongs at the deposit, not the withdrawal, and that over a quarter of the complaints reaching its Contact Centre concern identity verification requested only when a player tries to cash out. Licence condition 17.1.1 now forbids precisely that pattern for UK licensees: a withdrawal request must not trigger a demand for information the operator could reasonably have sought earlier. There is no equivalent rule offshore.

The warning signs are the same wherever the site is licensed. A verification demand that arrives for the first time with a large withdrawal. A request for a "verification fee" or a deposit before winnings are released – no legitimate operator needs that. Documents asked for over an unencrypted chat app. A live selfie request with no explanation, a set of "source of funds" questions that only appear once you have won, and a terms clause reserving sole discretion to void winnings. One further point: in the UK, un-staked deposits remain the customer's, and operators may not confiscate a balance because identity or age verification failed. Offshore, no British rule says that – which is why a player who intends to test an unfamiliar site should deposit small and try a withdrawal early, before there is a meaningful sum to lose.

Five Signs a Site Can Be Trusted, and How to Check Each

Each of these takes a few minutes and none of them requires anyone to gamble first.

The Licence Is Verifiable on the Regulator's Own Register

A licence claim is worth nothing until it is confirmed at source, and the three main regimes each publish a way to do it. Curaçao issues a Certificate of Operation Seal that must redirect to cert.cga.cw, and the certificate behind it must show the domain being visited. Anjouan certificates carry a unique licence number and a QR code linking to a public register, and the authority states that a certificate that cannot be verified through that register should not be relied upon. Kahnawà:ke's Logo Certificate Program generates a Certificate of Good Standing on clicking the Commission's logo. The Gambling Commission's advice is the same in shape: click through to the public register and check that the site's activities and domain names match. Check the domain, not the badge – a seal copied onto a page proves only that someone can use image editors.

The Terms Are Findable Before Money Changes Hands

Significant conditions must be findable, not buried. In the UK, social responsibility code 5.1.9 requires significant conditions on marketing incentives to be displayed transparently and prominently, and where online, in full no further than one click away. An offshore site has no such obligation, but it can still pass the test: if the wagering multiple, the maximum cashout, the maximum bet while wagering and the time limit are on one page reachable in one click from the offer, somebody chose to be clear. If finding them takes reading three linked documents, that is also a choice. Check which maximum applies – some operators apply the multiple to the bonus alone, others to bonus plus deposit, which changes the sum substantially.

Withdrawals Are Not Engineered to Take Time

A slow payout is usually a design decision rather than a technical limit. The UK's most recent published data, covering June to September 2024, records 44.2 million withdrawals from large online operators, of which 96.3 per cent cleared automatically and 0.1 per cent took up to 48 hours. Reverse withdrawals – the option to cancel a pending withdrawal and put the money back into play – were banned for UK remote operators under requirement 14B on 31 October 2021. Check whether the site offers that option at all. If it does, the operator has kept a feature the British regulator identified as a risk to engaged and vulnerable players, and there is no reason to expect the rest of its design to be more careful.

There Is a Real, Named Route to a Decision

An operator should name its ADR provider and its process. In the UK that is required: social responsibility code 6.1.1 obliges licensees to give customers access to an approved ADR entity free of charge where a complaint has not been resolved within eight weeks, and the Commission's approved list runs to eight providers including IBAS, eCOGRA, CEDR and ProMediate. Offshore, check the terms for a named adjudicator with contact details. Anjouan requires exactly that. A set of terms offering only "the operator's final decision" is telling the reader where the line ends.

The Jurisdiction Has a Record of Acting on Its Own Licensees

Watch what a regulator does to its permit holders rather than what it says about standards. Curaçao ended the legacy orange certificates on 15 October 2025 and required full compliance by 24 December 2025 for a full licence. Kahnawà:ke suspended a Client Provider Authorization in September 2026 and raises its CPA fees on 1 January 2027. The MGA maintains its Unauthorised URLs list. There is also a useful negative signal: Costa Rica has no comprehensive gambling licensing regime at all, and rejected the bill in 2026 that would have created one – so a site citing Costa Rican licensing is citing nothing, because the "data processing licence" sometimes mentioned in the trade is not a licence in the legal sense. And a further reality check on scale: an aggregator reading the Curaçao register at 03:30 UTC on 6 November 2026 counted 704 licences held by 698 operators, 552 of them active – [that reading comes from a third-party tracker rather than the authority itself, so treat it as indicative]{.ed}.

Six Checks Before Making a Deposit

1. Confirm the licence at the regulator's own register, not the site's footer. Start with the domain name on the certificate. If the certificate shows a different domain, stop there – the badge belongs to somebody else, and a seal borrowed from another operator is not a filing error but a warning.
2. Read the bonus terms in full before accepting anything, and write down four numbers: the wagering multiple, what it applies to, the maximum cashout, and the maximum bet while wagering. In the UK, wagering requirements have been capped at ten times since 19 January 2026, mixed-product offers combining two or more types of gambling are banned, and operators may not impose a maximum limit on withdrawing a deposit balance. None of that binds an offshore site, where published multiples of 25x to 50x are ordinary, and no-deposit offers at 40x to 60x with a €50-€100 cashout cap are common. Reason for the check: those four numbers decide whether a headline offer is worth anything.
3. Test the withdrawal channel early with a small sum. Deposit modestly, win or lose a little, withdraw, and see what happens next. Reason: it separates a site with a slow payments stack from one whose verification only wakes up when a player is ahead, while the sum at stake is small.
4. Identify the named dispute route and save the evidence. Screenshot the terms on the day of the deposit, plus the offer, the balance history and the chat. Reason: an adjudicator can only decide on what is documented, and terms can be edited between the deposit and the argument. Note that ADR providers generally will not look at a complaint until the operator's own procedure has run its course.
5. Bank-side controls work independently of the casino. Gambling blocks are offered by Bank of Scotland, Barclays, Halifax, HSBC, Lloyds, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling, working by declining payments under gambling merchant category codes, applied at card level, so each card must be activated separately, with a 48- or 72-hour cooling-off before gambling payments resume. Blocking software is the other layer: BetBlocker states it blocks over 1,368,000 websites and requires no registration; Gamban blocks licensed and unlicensed sites and is free in Wales, while TalkBanStop's free UK licence scheme ended on 31 March 2026, leaving £4.99 a month or £29.99 a year elsewhere after a seven-day trial. Reason: these sit outside the licence question entirely, which is exactly why they are useful when the site is offshore.
6. If it goes wrong, use the routes that exist rather than the one that does not. The operator's complaints procedure first, then a named ADR provider where one applies, then the licensing authority for a licence-status complaint, then the Gambling Commission, which will record the report and cannot recover money. For help rather than a ruling, the National Gambling Helpline is on 0808 8020 133, free, 24 hours, every day. Reason: knowing which body decides what saves weeks and prevents the common wasted complaint.

Whether the British Licence Still Sets the Standard

It does, and the gap has widened rather than narrowed. From 31 October 2025 every UK gambling business must prompt customers to set a financial limit before their first deposit, remind them every six months to review it, and offer limits through a free-text box at account level – with setting a limit presented as the default and declining it an active choice under requirement 12E. Financial vulnerability checks have been a licensing requirement since August 2024, with the threshold lowered to £150 of net deposits over 30 days from 28 February 2025. Credit cards were banned for gambling from 14 April 2020. The statutory levy, which began on 6 April 2025, charges online operators 1.1 per cent of previous-year gross gambling yield and raised just under £120 million in its first year, ring-fenced for research, prevention and treatment and split 50 per cent treatment, 20 per cent research, 30 per cent prevention. None of that money is collected from an operator licensed only in Curaçao, and no self-exclusion scheme ties those customers to a shared register.

Against that, the British-licensed sector's own record on the specific matter of paying people is imperfect. Complaints coded "withdrawals and/or financial transactions" fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025, but the Commission's 2024-25 annual report still calls withdrawals the cause of most of the complaints it receives, and on 21 October 2026 it announced a £900,000 regulatory settlement with an operator over failures including unnecessarily delaying consumer withdrawals – including a term that allowed only one withdrawal at a time and manual review of every fifth or tenth withdrawal for some customers. A licence is a starting point, not a guarantee.

One number explains the market better than any other. The Commission's analysis published 5 November 2026 estimates that among people who had gambled online in the previous four weeks, 2.5 per cent had engaged with an illegal gambling site, with a further 1.5 per cent doing so in the past 12 months – while across the whole adult population including non-gamblers, 94.4 per cent showed no indication of using one at all. Meanwhile its dashboard recorded 586 illegal gambling websites accessible to GB consumers in September 2026, and 311 sites faced disruption action in the quarter, 77 per cent of them seeing a fall in estimated traffic. That is the honest size of the thing: a small minority of online gamblers, several hundred sites, and a regulator that disrupts them quarterly without ever recovering a penny for an individual.

Frequently Asked Questions About UK Casinos Not on GamStop

Is any UK casino not on GamStop legal?

No. A casino not on GamStop cannot hold a Gambling Commission licence, because participation in the scheme has been a condition of that licence since 31 March 2020 under social responsibility code 3.5.5. So any casino not on GamStop is licensed abroad and is providing gambling facilities in Great Britain without a Commission licence – an offence by the operator under section 33 of the Gambling Act 2005, punishable on summary conviction by up to 51 weeks' imprisonment, a level 5 fine, or both. The player commits no offence.

Are UK online casinos not on GamStop safe to use?

Some are operated competently; none carries British protection. Gambling Commission rules on fair terms, financial limits, credit-card bans and self-exclusion bind only its licensees. Offshore, the safeguards are whatever the foreign regulator requires and the operator chooses. Anjouan does require segregated player funds, certified random number generators and a named ADR provider. Curaçao requires domain-specific operation certificates. Those are real standards, but the licence-verification and terms checks remain entirely the player's job, and the practical risk sits in the withdrawal stage.

What is the best casino not on GamStop?

I would not rank them, and the ranking itself is the problem. The comparison that matters is not brand against brand but method against method: which regulator verifies the licence, what the withdrawal route looks like, whether an ADR provider is named, and what the four bonus numbers say. Ranked criteria are useful; ranked brands are affiliate content. Any list of best or reputable offshore casinos should be read as advertising until it explains who adjudicates a dispute, because that single column separates a workable site from an argument with nobody.

What do the All British Casino statistics not on GamStop mean?

That search describes a muddle rather than a category. Brands trading on British-sounding names typically hold foreign licences, so their numbers appear in foreign data – which is why the two cannot be compared directly. The figures that do exist are the regulator's: 117,756 new GamStop registrations in 2025, 614,738 people on the register by July 2026, and 586 illegal websites identified in September 2026. Anyone quoting British-sounding percentages without saying which licence they came from is guessing.

Can I get free spins with no deposit at a casino not on GamStop?

Yes, and the terms matter more than the spins. A no-deposit offer at an offshore site typically carries a 40x to 60x wagering multiple with a cashout cap of €50 to €100, so the headline is often worth less than the withdrawal minimum. UK sites since 19 January 2026 cannot exceed ten times wagering and cannot mix product types within one incentive. Check whether the multiple applies to the bonus alone or to bonus plus deposit, and whether one no-deposit bonus may follow another – some terms void the second.

Can an offshore casino pay out to PayPal?

Sometimes, but the payment route is a fair signal of how a site is run. PayPal, Skrill, Neteller, MiFinity and Jeton are all ordinary at offshore operators, and the fee structure is where the sting hides: Skrill charges 2.80 per cent with a EUR 3.50 minimum for a bank withdrawal, Neteller the same in dollars, and both apply a 4.49 per cent foreign-exchange fee where conversion is needed. Meanwhile PayPal and Skrill charge nothing to pay a merchant directly. A site whose cashier lists only crypto transfers is telling you something about its banking relationships.

The Door That Decides It

The whole category comes down to one question, and it is not whether a site pays, but who is obliged to make it – British-licensed casinos answer to the Commission, an approved adjudicator and a free national helpline, while offshore ones answer to a foreign regulator that may never hear of the dispute at all. Offshore sites that are properly licensed, transparent about terms and honest about verification are workable, and I have no patience with the assumption that everyone who uses one is being foolish. What cannot be defended is the affiliate version of this market, which sells an offshore licence as though it were a British one and never mentions the word complaint. The numbers do not flatter either side: 44.2 million withdrawals in four months at large UK operators, 96.3 per cent cleared automatically, and still withdrawals are the single biggest source of complaints the regulator receives.