Casino Sites Not on GamStop and Player Balance Protections

Casino sites not on GamStop are venues run outside the British licensing system: they hold no Gambling Commission licence, so the national online self-exclusion scheme does not reach them and UK player protections do not apply. Your balance is protected only by whatever the offshore regulator and the operator's own terms happen to provide.

There are two facts about this market that the pages selling it always keep apart.

The first is legal. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and the Commission states plainly that it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence — including where the operator holds a licence somewhere else. The offence sits with the provider, not the adult player. That distinction matters, and it is not the same thing as safety.

The second is practical. This article is about the second question only: what protects a player's balance at a site with no British licence. The answer, in almost every case, is less than the marketing implies. Self-exclusion through GamStop Online holds for its full term — six months, a year, five years or five with auto-renewal — and then stays in place until the person contacts GamStop to remove it. No offshore site is a way round that. It is simply a site that never asked.

If gambling is causing harm, the National Gambling Helpline is free on 0808 8020 133, 24 hours a day, every day of the year. In Wales the number given is 0808 2819 265. As of 13.11.2026, that remains the fastest route to actual treatment.

The Numbers Behind the £16.6 Billion Question

Two sets of figures describe this market, and they disagree by a factor of six, which is worth knowing before anyone quotes one at you.

H2 Gambling Capital estimates that stakes with illegal gambling operators in the UK reached £16.6 billion in 2025, up from about £5 billion in 2019, with the legal share of gambling falling from 97 per cent to 92 per cent. Yield Sec, working for the Campaign for Fairer Gambling, put the whole GB online market at £8.8 billion gross gaming revenue in 2025 — 91 per cent regulated, 9 per cent not. A Frontier Economics study for the Betting and Gaming Council conservatively estimated £2.7 billion staked annually online on the black market, 2.1 per cent of the £128 billion staked with regulated operators.

The Commission's own measurement is more careful and much smaller. Analysis published on 5 November 2026, covering April 2025 to April 2026, estimated that 0.6 per cent of respondents across the whole population had engaged with illegal gambling websites in the past four weeks, with a further 0.4 per cent in the past twelve months. Among those who had gambled online in the past four weeks, that figure rises to 2.5 per cent. The Commission's methodology assumes £0.32 of gross gaming yield per minute of online slots play and explicitly does not capture activity hidden behind a VPN.

I think the honest reading is this: several million British adults have tried an unlicensed site, most of them briefly, and the trade figures that get quoted loudest are the ones commissioned by people with an interest in the size of the number. That is not a scandal. It is just how this particular argument is fought.

The supply side is better measured. The Commission's illegal gambling dashboard recorded 586 illegal gambling websites accessible to GB consumers in September 2026, 4 per cent more than September 2025. Between April 2024 and the end of that reporting period it issued 3,140 cease and desist and disruption notices, referred 447,778 Bing and Google URLs and secured 287,961 removals. Measured across 160 illegal sites, engagement fell 32 per cent on average after disruption — but by 91 per cent where a registrar block or suspension was used, and 60 per cent for GEO IP blocking, against 30 per cent for Google removal. Taking a site out of the index makes it harder to find. It does not stop it loading.

Best Casino Sites Not on GamStop and the Meaning of Quality

There is no quality ranking that survives contact with the word "best", because "best" here depends entirely on which promise is being kept. A site can be best on licence, best on payout terms, best on how quickly it pays, or simply best at not being awful — and those are four different operators.

What can be compared is the licence: the thing that determines who, if anyone, is watching. Here is how the substantive offshore regimes line up for a British player. Fees and capital requirements are not proof of quality; they are a rough proxy for how much an operator has at stake in behaving, and how much paperwork stands between it and a fine.

A word on that last row. Costa Rica's Legislative Assembly rejected Bill No. 25,057 in early 2026; the bill would have introduced a mandatory licensing regime. Under Costa Rican law, games of chance where the outcome depends primarily on luck are generally prohibited. A site displaying a Costa Rican "licence" is displaying something that is not one.

Why Identity Checks Are Delayed at Offshore Sites

Every offshore operator runs identity checks, and the moment they arrive tells you what the site is for.

A British-licensed operator must obtain and verify a customer's identity before that customer is permitted to gamble — that is Licence Condition 17, in force since 7 May 2019 — and the Commission expects those checks brought forward to before a deposit or a stake. In practice a regulated site verifies a name, address and date of birth against a credit reference agency or the electoral roll at sign-up, in seconds, and the customer never sees it. Anti-money-laundering rules under the Money Laundering Regulations 2017 then bite at €2,000 deposited or withdrawn, counting linked transactions and a single logged-on session together.

The offshore pattern is the reverse. Registration takes an email address. Deposits clear instantly. The document request lands when a withdrawal is attempted — a passport, a utility bill, a selfie, sometimes a bank statement to establish source of funds. The Commission's 2026 blog reports that over a quarter of complaints reaching its Contact Centre concern identity verification, a concern customers raise when documents are demanded only at the point of withdrawal, and that this is one of the commonest dispute types referred to ADR providers.

Here is the mechanism, and it is not always sinister. An operator that took the money without checking has an unbudgeted liability the day a player wins. The delay is the operator deciding whether to pay for the check or to find a term that lets it not pay. Licence Condition 17.1.1 forbids a licensee from requiring, at withdrawal, information it could reasonably have requested earlier — and that condition does not exist offshore.

Warning signs worth acting on

• Documents requested for the first time at withdrawal, having never been mentioned at deposit.
• A verification provider's check that "cannot be completed" without a specific document type that was not listed in the terms.
• A request for source-of-wealth paperwork on a balance far below the €2,000 AML threshold.
• Terms reserving the operator's "sole discretion" to void winnings. The Commission's guidance treats such clauses — "may" or "reserve the right" — as unfair under the Consumer Rights Act 2015. Offshore, they are merely words an operator may rely on.
• A withdrawal cancelled and returned to the balance to be wagered again. Reverse withdrawals have been banned for British-licensed remote operators since 31 October 2021 under RTS 14B. Where the option still exists, the site is not operating to that standard.

Comparing British and Offshore Regulatory Standards

The British licence is the benchmark, so it is worth stating exactly what it buys a player — not as a compliment to the Commission, but as the yardstick against which any offshore claim of safety should be measured.

That last row deserves the space. British operators must keep customer funds in a separate client account, separately from business accounts, must choose one of three protection ratings — "not protected", "medium protection" or "high protection" — and must state in writing which applies. Where the rating is "not protected", the customer must be reminded once every six months, with the value of the funds held stated. It is a disclosure duty, not a guarantee: keeping money in a client account does not mean customers get it back if the operator fails, and businesses are permitted to hold customer money in overseas bank accounts. But at least the customer is told, in writing, before they deposit.

Offshore, nothing compels that sentence to exist.

Mobile Billing and Payment Risks in Offshore Casinos

Payment methods rarely decide whether an offshore site is safe, but they shape what happens when it is not.

Pay-by-phone deposits are the giveaway method for this market, and they are the hardest to reverse. A payment made through a mobile billing platform is classified as an operator-billed transaction and, unlike a card payment, sits outside the chargeback route under section 75 of the Consumer Credit Act. A disputed card transaction has a procedure behind it. A disputed premium-rate or operator-billed phone charge has a phone company.

The rest of the picture, from the published fee schedules:

• E-wallet fees are charged twice over. Skrill and Neteller both charge 2.80 per cent of the amount withdrawn to a bank account, with a minimum of €3.50 or USD 3.50, effective 12 January 2026. Add Neteller's 4.49 per cent foreign-exchange fee where conversion is needed, and a round trip through an offshore casino in a different currency can cost more than the tax it appears to dodge.
• Dormancy charges are the quiet one. A Skrill or Neteller account unused for six months attracts a €5.00 or USD 5.00 monthly service fee. MiFinity becomes inactive after twelve months and takes €1 a month. MuchBetter charges $5 a month after twelve months of inactivity.
• Crypto withdrawals settle on-chain, not at the casino's convenience. Bitcoin targets a ten-minute average block interval, but within any ten-minute window the probability of a block being found is about 63 per cent; six confirmations is the convention for value at risk. A USDT transfer on TRON consumes about 65,000 Energy to an existing wallet and about 130,000 to a new one — roughly 13 TRX and 26 TRX burnt without staked Energy.
• Faster Payments is the fast free option, and it is a British one. Over 90 per cent of Faster Payments transactions complete in under two seconds, with a scheme ceiling of £1 million per transaction, and individual banks set their own lower limits. That is why UK-licensed withdrawals can be genuinely instant. It is not a of the casino.

I would treat any site making speed its headline claim with some caution. Speed and safety are separate variables, and the operators loudest about the first are usually quietest about the second.

Five Signs an Offshore Operator Can Be Trusted

None of these is a guarantee. Each is a check that costs a few minutes and removes a category of operator that should not be holding anyone's money.

The licence seal resolves to the regulator's own register

Click the seal. On a Curaçao Certificate of Operation, that click must redirect to cert.cga.cw, the certificate must be domain-specific, and the domain printed on it must match the site being viewed — if it belongs to another operator, the site is displaying someone else's certificate. The old "orange" sub-licence certificates ceased on 15 October 2025, and the four former master licensors stopped issuing on 18 August 2024, 1 October 2024, 1 November 2024 and 31 January 2025. Anjouan certificates carry a unique licence number and a QR code linking to a public register. Kahnawake runs a Logo Certificate Program that generates a Certificate of Good Standing for the site in question.

The terms name a complaints route with real authority

Look for a named ADR provider with contact details in the player-facing terms. Anjouan requires licensees to designate an approved provider and expects complaints resolved within 30 days before escalation; four providers are approved. Kahnawake employs a full-time Dispute Resolution Officer and requires the player relationship to be contractual and free of unfair terms. A site with no named dispute body has no escalator, whatever the marketing says.

The bonus terms are readable in one click

Check the wagering multiple, the contribution weighting and the maximum cashout. Offshore welcome offers typically sit at 35× to 50×, and a contribution chart can give slots 100 per cent while craps and live dealer games count at 0 per cent. A maximum cashout clause converts a win into a smaller win: one operator reserves the right to limit withdrawals from bonus winnings to 300 per cent of the bonus credited, voiding the excess.

The withdrawal route is fixed and written down

Count the days, and check whether a withdrawal can be reversed. A site that shows a pending period with a cancel button is offering back money its own regulator, if it were British-licensed, would forbid returning. Check also whether there is a maximum withdrawal term. These are the clauses that get enforced by silence.

The money is held the way the operator says it is

Ask two questions: is there a stated segregation of player funds, and is there an insolvency rating disclosed? Anjouan's published standards require segregated player funds, independently certified random number generators, AML controls and age verification. Those promises are worth exactly as much as the regulator's willingness to check, but an operator that will not put them in writing is telling the truth about something else.

Why PayPal Does Not Imply Safety

PayPal deserves its own paragraph, because it is the method most often assumed to be a safety net and it is not one.

PayPal is a payment service provider regulated in the UK, and a British-licensed operator may only accept payment from GB customers by a method whose provider falls under the Payment Services Regulations 2017. That constrains the operator, not the player. A PayPal account carries no gambling-specific protection: a personal UK account pays no fee to withdraw a balance to a bank account where no currency conversion is involved, charges 3 per cent to withdraw to a US bank account, and charges a £0.50 bank return fee if a withdrawal fails on incorrect details. None of that inspects whether the casino was licensed.

The rule that looks like a safety net and is not: section 75 gives card-payment recourse against the card issuer, and it does not apply to operator-billed phone payments, e-wallet balances, or crypto. Bank gambling blocks are a better tool and a narrower one — they work by declining payments under gambling Merchant Category Codes, cover online casinos, betting sites, gaming apps and physical venues, must be activated card by card, and can be lifted at most banks after a 48-hour or 72-hour cooling-off period. They stop money leaving. They do not retrieve money already gone.

If money has gone anyway, the practical list runs as follows. First, the operator's own complaints procedure, in writing, within six months of the incident. Then, once eight weeks have passed or a deadlock letter has been issued, an ADR provider — free to the consumer. For a British-licensed site the providers include IBAS (a gambling specialist covering remote, betting, bingo, casino and lotteries) and eCOGRA (approved for all sectors, taking complaints in English free of charge, though it may refuse a dispute where at least two weeks have not passed or where the dispute arose more than a year ago). For scale: eCOGRA's report for 1 October 2024 to 30 September 2025 records 911 disputes received, 150 valid "Deposits & Withdrawals" cases, an average of 31 days to resolve domestic disputes and 17.8 per cent of completed disputes ruled in the consumer's favour. Of 499 invalid disputes, 361 — 72.3 per cent — had not gone through the operator's internal procedure first. IBAS recorded 3,721 domestic disputes in 2024-25 with an average completion time of 20 days and 100 per cent operator compliance with decisions in the consumer's favour. Read the odds there before assuming a complaint is a remedy. For an unlicensed site, the first two rungs of that ladder mostly do not exist, and the Commission — a regulator, not an ombudsman — cannot resolve individual complaints or get anyone's money back.

Then there is the self-exclusion point, which the trade prefers not to dwell on. The Commission issued an industry warning notice on 20 January 2025 about casino games from licensed operators appearing on unlicensed websites, noting that such sites often target customers who have self-excluded via GamStop and may have inadequate social responsibility and anti-money-laundering controls. A site that advertises itself to excluded players is not offering freedom. It is offering a venue with no duty to check.

How to Judge an Offshore Site in Six Steps

1. Check the licence number against the regulator's own register, not the site's claims. A historic /JAZ number is not proof of a current Curaçao licence; the legacy seals ceased on 15 October 2025. An operator relying on a retired certificate is either out of date or hoping the reader is.
2. Read the wallet terms before depositing. Segregated funds and a stated insolvency rating are the difference between holding a balance and holding a claim. If the terms are silent, treat the balance as unsecured.
3. Work out the true withdrawal cost. Add the e-wallet withdrawal fee, the foreign-exchange markup and any dormancy charge. Skrill charges 2.80 per cent with a €3.50 minimum and 4.49 per cent for conversion; the round trip is often larger than any headline saving.
4. Read the bonus terms in full, including the maximum cashout. A 300 per cent cashout limit on bonus winnings means the offered bonus is capped at three times its face value, whatever the wagering multiple suggests.
5. Check whether a deposit balance can be withdrawn while a bonus is active. Under CMA principles, operators in the UK must let a customer exit a promotion with their remaining deposit plus winnings from play with that deposit. If that right is absent, the bonus is a lock on the deposit.
6. Decide before depositing whether you accept the absence of a GB escalator. Once money is at an offshore site, a dispute has no cheap route to anyone with authority to order payment — and no route at all to the Commission.

The Rules That Do Not Travel

Everything in the section above describes a gap. It is worth naming the size of it.

British operators were required to join the national multi-operator self-exclusion scheme as a licence condition from 31 March 2020, sitting in LCCP social responsibility code 3.5.5; in April 2020 the Commission added a duty to check the entire customer base for GamStop registration at least every 24 hours. GamStop Online reported 614,738 consumers on the register as of July 2026, more than one in two of them on the maximum five-year term. On 3 April 2020 the Commission suspended the licences of two operators for failing to integrate by the deadline. That is what enforcement of a self-exclusion duty looks like when it exists.

Offshore there is no such duty, no 24-hour sweep, no licence to suspend. Where a foreign scheme does exist, it differs in kind: Kahnawake states its own voluntary self-exclusion is permanent and irrevocable, and a player who breaches it forfeits funds deposited or won to a charity chosen by the Commission.

The remedies are cheaper and duller than the problem. Blocking software is worth installing before the account is opened: BetBlocker blocks over 1,368,000 gambling websites and 3,100 apps, requires no registration and is free worldwide. Gamban blocks licensed and unlicensed sites and is designed to be as difficult to remove as possible; it is free for residents of Wales, but in England and Scotland costs £4.99 per month or £29.99 per year after a seven-day trial, the free UK licence scheme having ended on 31 March 2026.

And the domestic figures that frame all of this: total Great Britain gambling industry gross gambling yield was £17.5 billion in the year April 2025 to March 2026, up 4.4 per cent, with remote casino, betting and bingo at £8.3 billion. The statutory levy, commenced 6 April 2025, raised just under £120 million in its first year, ringfenced for research, prevention and treatment and split 20 per cent research, 30 per cent prevention and 50 per cent treatment. In the Gambling Survey for Great Britain published 16 July 2026, based on 20,775 adults, 2.4 per cent scored 8 or more on the Problem Gambling Severity Index — stable across three survey years at 2.5, 2.7 and 2.4 per cent — and 3.4 per cent of those who had gambled in the past twelve months had sought support because of their own gambling.

That last number is the one the offshore market never mentions. Most people who try an unlicensed site are not harmed by it. Some are, and the ones who are have the fewest levers: no 24-hour check, no licence to complain to, no ADR provider bound to answer.

The National Gambling Helpline is free on 0808 8020 133, 24 hours a day, every day of the year, and in Wales on 0808 2819 265. It is not a crisis line — staff cannot transfer a caller at immediate risk of harm and follow their own safeguarding procedures instead. NHS England had opened 15 specialist gambling clinics across England since 2019, and integrated care boards commission eight regional NHS gambling services receiving almost 5,000 referrals a year against a target of 3,000. Gamblers Anonymous England, Wales and Ulster runs around 250 meeting locations with no appointment needed, on 0330 094 0322. None of those bodies asks where the account was opened.

FAQ

Are casino sites not on GamStop legal?

The legality sits with the operator. Section 33 of the Gambling Act 2005 makes it an offence to provide gambling facilities without an operating licence, and the Commission states it is illegal to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where a licence is held elsewhere. Adult players are not the target of that offence. Legality, note, says nothing about whether a balance is protected.

Why do UK casino sites not on GamStop appear in search results at all?

Because enforcement works on supply, not on listings. Between April 2024 and the end of that reporting period the Commission issued 3,140 cease and desist and disruption notices and secured 287,961 URL removals, but the dashboard still recorded 586 illegal sites accessible to GB consumers in September 2026, 4 per cent more than a year earlier. Search removal reduces discovery; registrar blocks and GEO IP blocking reduce access far more.

Do offshore sites check identity or age?

They check eventually, and usually at withdrawal. A British licensee must verify identity before a customer is permitted to gamble under Licence Condition 17, with anti-money-laundering checks triggered at €2,000 deposited or withdrawn. Offshore, registration needs an email address and documents arrive when a payout is requested — which is why over a quarter of complaints to the Commission's Contact Centre concern identity verification.

Is a pay by phone casino site safer because the charge appears on a phone bill?

It is the opposite. Operator-billed phone payments sit outside the section 75 chargeback route that covers card payments, so a disputed deposit has no card issuer to appeal to. A payment method that is convenient to deposit with and awkward to dispute is precisely the combination a site with no British licence tends to prefer.

Does a Curaçao or Anjouan licence mean anything?

It means a real regulator exists, with a register worth checking. Curaçao's reform took effect on 24 December 2024, its Certificate of Operation must be domain-specific and its seal must redirect to cert.cga.cw. Anjouan's certificates carry a licence number and a QR code. But neither regulator offers a British-style complaints escalator, and neither can do anything about a player in Britain who is owed money.

What if the balance is small — does it matter?

It matters less, and the arithmetic still runs the same way. A maximum cashout clause, a 25× wagering requirement and a 2.80 per cent withdrawal fee with a €3.50 minimum all take their cut regardless of size. The Commission's own assessment of the illegal market counted roughly 1,000 unique illegal gambling websites accessed by GB consumers over a monitored period. Individually, each transaction is small. Collectively, they are the market.

The Balance Is the Only Thing That Matters

Strip away the licence seals, the fee schedules and the six different estimates of the black market's size, and the question this market turns on is narrow: when a player asks for their money back, who has the power to make the operator pay — and at an unlicensed site, as of 13.11.2026, the answer is usually nobody.

British operators must check their entire customer base against the self-exclusion register at least every 24 hours; the Commission reported 614,738 people on that register in July 2026, more than half of them on the maximum five-year term. A site outside that system is not offering those players a loophole. It is offering an account with nobody assigned to notice them — which is an oddly specific thing to sell, and a profitable one. The National Gambling Helpline is on 0808 8020 133, free, day and night.