Casinos without GamStop are operators holding no Gambling Commission licence, so the scheme cannot block them. Gambling Commission figures show 586 such sites were accessible to British consumers in September 2026, and trade research puts £16.6 billion staked illegally in 2025. UK protections, free dispute arbitration and fund safeguards do not apply.
It is often typed "gamestop", which is a slip worth correcting once: the scheme is GamStop.
The word "instant" does a lot of work in this trade. An offshore site promising instant payouts is, in the first instance, promising it will not make you wait — which is the least it could do, because the wait is not the product. The product is the absence of the licence. Strip that away and what is left is a business model in which the costs do not disappear; they move. They move into a bank-transfer fee, a currency spread, a withdrawal ceiling measured as a multiple of a bonus you never really held, a quiet line permitting one cashout at a time, and the plain fact that when an argument starts there is no British regulator behind you and no free arbitrator with a duty to answer. The 2023 white paper proposed £1 stake limits for some online slots; the trade got a compromise, and what actually came into force on 9 April 2025 was £5 a spin for all adults and £2 a spin for 18 to 24s. Offshore, no such ceiling exists. That is not a gift. It is the first item on an invoice that arrives later.
This page looks at 2026's market from the angle I find least covered elsewhere: the costs a player does not see at first.
Table of Contents10
- First, the thing that is not a loophole
- The trade's favourite excuse, tested
- The check that turns into a trap
- What the fast cashout table leaves out
- Five signs a site can be trusted, and how to check each one
- Playing a site outside the licence, step by step
- What the licence is worth when something goes wrong
- Why the offshore licence registers deserve a closer look
- Questions About Casinos Without GamStop
- The invoice comes after the headline
First, the thing that is not a loophole
Casinos without GamStop are not a way round an exclusion. Take that in before anything else on this page, because the trade would prefer the reader never quite gets there.
The Commission states it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a licence from it, and that this holds even where the operator carries a licence somewhere else. Section 33 of the Gambling Act 2005 is the provision doing the work: providing facilities for gambling without an operating licence is an offence, punishable on summary conviction by up to 51 weeks' imprisonment, a level 5 fine, or both — six months in Scotland. It is immaterial, the section says, whether the facilities are provided inside or outside the UK, and for remote gambling it bites if even one piece of remote gambling equipment sits in Great Britain, or if the operator knows, or should know, that the facilities are being used or are likely to be used here.
For balance, the Act's general offences attach to those who provide facilities, not to an adult punter who places a stake. That is the small distinction offshore marketing stretches into a large claim. The larger fact is that the scheme's obligations run only to operators holding a Commission licence — social responsibility code provision 3.5.5 requires all of them to take part in the national multi-operator self-exclusion scheme, which is why they do. An offshore site is not covered by GamStop, and that is a description of a gap in a licence regime, not of a service.
The scheme in one line
GamStop Online is the UK's national online self-exclusion scheme, run by The National Online Self Exclusion Scheme Limited and free to use. It has been open to consumers since 27 April 2018, so the register has had eight years to thicken. Two figures from it explain why the gap matters commercially: 117,756 new registrations were recorded during 2025, and 614,738 consumers were on the register as of July 2026, of whom more than one in two had chosen the maximum five-year term. A copy of that register is exactly what an unlicensed site declines to consult.
What self-exclusion actually does
Self-exclusion holds for its full term. It does not lapse, it does not quietly fall away at the end of the period chosen, and it stays in place until the person contacts GamStop to have it removed. While it runs, registration cannot be cancelled. Under the terms of use, auto-renewal on a five-year minimum exclusion period can only be switched off in the final six months of that period, and it otherwise continues for up to four further five-year periods. Leave the register at the end of a term without deactivating and GamStop holds the data through a further automatic seven-year self-exclusion period during which operators are told that person was previously excluded.
Anyone in difficulty in Britain has free routes: the National Gambling Helpline run by GamCare on 0808 8020 133, open 24 hours a day, every day of the year — 0808 2819 265 for callers in Wales — plus NHS gambling services and Citizens Advice for the debt that so often arrives alongside.
If £16.6 billion staked illegally in 2025 reads as dramatic, that is because it is a different sort of number from the one the Commission publishes. Among adults who had gambled online in the past 4 weeks, the Commission estimates 2.5% had engaged with an illegal gambling website. Across the whole population, including non-gamblers, the figure is 0.6%. The trade's own headline counts money; the regulator's counts people, and people are scarcer than pounds.
The trade's favourite excuse, tested
The Commission has a formal position on the idea that offshore sites are simply seasoning on a lawful market, and it is not a friendly one. It issued an industry warning notice on 20 January 2025 about casino games supplied by licensed operators turning up on unlicensed websites available to British consumers, and it noted what those sites often do: target customers who have self-excluded via GamStop, and run social responsibility and anti-money-laundering controls that are, to use the regulator's word, inadequate.
Then it went to work. Since April 2024 the Commission's Illegal Markets team has issued 3,140 cease and desist and disruption notices — 2,032 cease and desist notices, 774 registrar referrals, 402 host referrals and three payment provider referrals — referred 447,778 Bing and Google URLs, and secured 287,961 URL removals. Measured across 160 illegal gambling websites for which traffic data existed, engagement fell by an average of 32%. The detail is more interesting than the headline: registrar blocks and website suspensions produced an average fall of 91% each, ahead of GEO IP blocking at 60%, Bing removal at 52% and Google removal at 30%. Search-engine removal makes a site harder to find. It does not stop anyone. The Commission says so itself.
Which means the trade's resilience is borrowed, not built. A site pushed off Google reappears under a new domain in days; a site behind a registrar block or a geo-block has to move its infrastructure, and that costs money it does not want to spend. Enforcement is not a tidy scoreboard, and the Commission knows it. In the year to March 2026 it commenced one prosecution across all four quarters, while issuing thousands of administrative notices. The notice is the strategy. So is the money: the National Crime Agency's DAML regime means an operator suspecting money laundering must obtain a defence before moving funds, which is a lawful reason for a payout to sit still — though, as the Commission has said, it is not a right to confiscate a deposit.
The check that turns into a trap
Identity verification is where this entire topic turns, so it deserves precision rather than a warning label. Under Licence Condition 17, introduced on 7 May 2019, a licensee must obtain and verify information establishing a customer's identity before that customer is permitted to gamble, and that information includes name, address and date of birth. The Commission is explicit that age and identity checks should come before a deposit or a stake, and that onboarding on initials, nicknames or a commercial address is not good enough — a point it made sharply in August 2026, noting that a middle name in place of a forename creates mismatches with records held elsewhere, including GamStop, and quietly undermines self-exclusion.
The first time is meant to be unremarkable. Many operators verify by matching a name against databases such as credit reference agencies and the electoral roll, and no document is needed at all. Where documents are wanted, passports, driving licences and household bills are the usual fare, and the Commission's stated position is that it cannot give a timescale because the process varies: electronic verification can be instant, paperwork takes longer.
Later, in a well-run account, the same rules hold and the friction does not. Licence condition 17.1.1 states that a withdrawal request must not result in a demand for extra information if the licensee could reasonably have asked earlier — the anti-money-laundering duty is the exception, not the excuse. Where a business delays a payout for want of ID, it may be in breach of Licence Condition 17 and liable to regulatory action. In the Commission's words, operators should not impose friction at withdrawal rather than at deposit, and where there are no regulatory concerns about a customer there is no valid reason to hold the money.
Warning signs, then. Documents demanded only at cashout. A "verification department" that answers by template. A request for a selfie or bank statements with no explanation tied to a threshold. And a term permitting the operator to confiscate a deposit balance because verification was never completed — the CMA's view is that a consumer is legally entitled to deposited money, to winnings from money deposited and gambled, and to bonus winnings where the conditions are met. Over a quarter of complaints reaching the Commission's contact centre concern identity verification, and the Commission has flagged a related worry: operators using "fuzzy matching" through third-party providers and onboarding customers on partial verification. Rushed verification is not a shortcut. It is a liability filed under someone else's name.
What the fast cashout table leaves out
The table everyone publishes compares how quickly money arrives. Mine compares what the method takes. Speeds are as the payment providers or regulators describe them; the costs are the ones a player meets sooner or later.
| Method | Typical time to reach the player | What it actually costs |
|---|---|---|
| Bank transfer via Faster Payments | Over 90% of Faster Payments transactions complete in under 2 seconds; the scheme ceiling is £1 million per transaction, though banks set lower limits of their own | Nothing at the rail; the £1 million is a ceiling, not an entitlement, and the operator's own checks sit in front of it |
| Card payout | Real-time processing, funds available within 30 minutes of approval under Visa Direct Fast Funds | Charged at the operator's discretion — the Commission allows a processing fee if it does not exceed the direct cost of processing |
| E-wallet, Skrill or Neteller | Minutes once the operator releases the money | Skrill charges 2.80% of the amount withdrawn, minimum €3.50, for a bank withdrawal; Neteller charges 2.80%, minimum $3.50; both apply a 4.49% foreign-exchange fee where conversion is needed |
| Crypto, Bitcoin | An average of 10 minutes between blocks, so a first appearance is not a first confirmation; most merchants wait six blocks, and only about 63% of 10-minute windows contain a block at all | Network fees, priced by the network rather than the casino, plus a confirmation wait that the word "instant" has not survived |
| Crypto, USDT on TRON | Smart-contract transfer, settled as fast as the chain confirms | Without staked energy, a transfer burns roughly 13 TRX to an existing wallet and roughly 26 TRX to a new one — the "free" rail passes the bill to the sender |
Underneath all of it sits a rule offshore sites do not owe you, because they do not hold a Commission licence: LCCP licence condition 17.1.1, licence condition 7.1.1's requirement that terms be fair under the Consumer Rights Act 2015, and the outright bar on terms imposing a maximum limit on what a customer may withdraw from their deposit balance. The Commission's own example of a prohibited term is "You may withdraw up to £50 per day and up to £500 per week". I have seen that clause on sites this table's readers were told were faster.
The other half of the ledger is where the money goes when a payout is refused. A licensed operator must offer a free route to an approved alternative dispute resolution provider if a complaint is not resolved to the customer's satisfaction within eight weeks — the Commission's list includes ADR Group, Pegasus ADR Service, Blexr, CEDR, eCOGRA, IBAS, ProMediate and Tattersalls Committee. IBAS recorded 3,721 domestic disputes in 2024-25 and reports 100% operator compliance with decisions in the consumer's favour in both that year and the previous one, on an average domestic completion time of 20 days. Offshore, the nearest equivalents are named in terms — Anjouan Gaming approves EGIS ADR, Axion ADR, iGaming ADR and an operator, and expects complaints resolved within 30 days before escalation — but using them means arguing in the regulator's own jurisdiction, under that regulator's standards. The Commission's £900,000 settlement with a licensed operator on 21 October 2026, over failures that included unnecessarily delaying consumer withdrawals, is the shape of UK enforcement. Offshore, that bill never arrives.
Five signs a site can be trusted, and how to check each one
Trust is not a feeling about a website's design. It is a set of documents you can inspect.
The licence is named and checkable
A trusted operator names the regulator and gives you a way to verify it. Check the Gambling Commission's public register and confirm that the site's activities and domain names both appear — not just that something with the company's name does. For a Curaçao claim, a Certificate of Operation Seal must redirect to cert.cga.cw, and if the certificate behind it shows a different domain from the one you are on, it belongs to another operator. For Anjouan, certificates carry a licence number and a QR code linking to the public register, and the regulator's own stated rule is that a certificate which cannot be verified through that register should not be relied upon. Rather more tellingly, Anjouan Gaming said on 10 June 2026 that its licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world". No licensing authority can exempt an operator from local law. A trust mark that admits it proves nothing about Britain is worth reading closely.
The withdrawal terms are in the open
Find the payout clause before you find the deposit button. Look for a maximum withdrawal amount, a cap on the number of cashouts you may request in a period, a schedule of review on every tenth withdrawal, or any term giving the operator sole discretion to void winnings — the Commission treats "may" and "reserve the right" clauses as unfair under the Consumer Rights Act 2015. A term limiting winnings from bonus funds to a percentage of the bonus credited is a cost wearing a rule's clothing.
The bonus terms fit on one screen
A wagering requirement is a debt you did not know you were taking on, and its size is the price. Under Social Responsibility Code 5.1.1 in force since 19 January 2026, a Commission licensee may not apply wagering requirements above ten times, and may not mix more than one product type inside a single incentive. Offshore, that ceiling does not exist. Compare contribution weights too: a chart giving slots 100%, table games 20%, video poker and blackjack 10%, roulette and baccarat 5%, and craps, jackpots and live dealer games 0% means a bonus can be uncompletable in the games a sensible player would choose.
The checks are proportionate, and explained
Demands should arrive early and be justified. A financial vulnerability check may use only publicly available risk flags — bankruptcy orders, County Court Judgments, Individual Voluntary Arrangements, High Court Judgments, Administrative Orders, Debt Relief Orders — after £150 net deposits over 30 days. A gambling-blocking service from a bank exists separately and is a sensible second lock: the Commission's list names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling, most of which use a 48- or 72-hour cooling-off before gambling payments resume.
Time limits and dispute routes are stated in the terms
A serious operator tells you how long you have to complain, how to escalate and which body will hear it. A site whose listed arbitrator cannot accept the dispute — because at least two weeks have not passed, or because the site is not on its approved list — has told you what its dispute route is worth.
Playing a site outside the licence, step by step
What follows is lawful, ordinary and dull on purpose. It is what a careful player does before deciding whether a headline is a promise or an advertisement.
- Verify the licence, and write down what you find. Open the regulator's register and check the operator's name and the exact domain in front of you. Reason: a licence belonging to a different domain is a licence belonging to a different business, and the claim is doing work it cannot support.
- Read the withdrawal clause first. Look for maximum withdrawal limits, cashout frequency restrictions and any clause allowing funds to be voided at the operator's discretion. Reason: the exit terms are the terms that matter, and they are always shorter than the wagering terms by design.
- Find the bonus cost in numbers. Identify the wagering multiple, the game contribution weights and any maximum cashout on bonus winnings. Reason: a bonus you cannot clear is not money, and $5 that arrives after 25× play of a 10%-weighted game is a fee dressed as a gift.
- Test the payment rail with a small withdrawal before you need it. Withdraw a modest sum early, note what arrives and what was deducted. Reason: Skrill and Neteller charge 2.80% with a €3.50 or $3.50 minimum and 4.49% on conversion, and it is better to learn that about £5 than about £500.
- Write the dispute route down, and check it can hear you. Confirm the named ADR body, its time limits and whether the site is on its approved list. Reason: a dispute route that cannot take your case is decoration. The Commission will record a complaint but cannot get your money back — it is a regulator, not an ombudsman.
- Set your own limits and leave them set. Whatever the site offers, decide a monthly figure and a session length before you start, and use the account's own limits as a lock rather than a suggestion. Reason: on an unlicensed site you are the only social responsibility control there is.
What the licence is worth when something goes wrong
Every cost on this page resolves into one question: who is answerable. On a Commission-licensed site, quite a lot of people are. Customer funds must be held in a separate client bank account, and the operator must state a protection rating of "not protected", "medium protection" or "high protection" in its terms — with an acknowledgement required before you gamble, on the first deposit and after any change. The rating matters, because a separate account is not a guarantee: gambling businesses are permitted to hold customer money in overseas accounts, and money staked in an open bet is not customer funds at all. An operator rated "not protected" must remind the customer every six months that the funds are not protected. Offshore, the rating category need not exist, and often does not.
Then the cashouts again. The Commission's figures for withdrawals by customers of large online operators, covering June to September 2024, record 44.2 million withdrawals, of which 96.3% cleared automatically, 3.5% cleared within 24 hours and 0.1% took up to 48 hours. The headline is the 96.3%. The instructive part is the 3.5% — roughly 1.5 million payouts that sat inside a licensed, monitored, dispute-backed system and still took a day. Complaints coded "Withdrawals and/or financial transactions" at the Commission's contact centre fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025, and withdrawal problems remain the single most common subject of complaint. Now ask what a disputed payout looks like where the ADR service answers in another jurisdiction, in a process defined by that regulator's rules, and the ticking clock is the player's problem rather than a licence condition.
The e-wallets charge on the way out, the chains charge on confirmation, and the bank's block is free but only does the deposit side. A licensed site must accept payment only by a method whose provider is a payment service provider within the Payment Services Regulations 2017 — a condition that looks procedural until you need to know who is holding the money.
Why the offshore licence registers deserve a closer look
The most common defence of these operators is that they are "properly licensed", usually somewhere. The registers are worth reading, because they have been moving.
Curaçao used a master-licence system for years, and dismantled it. The National Ordinance on Games of Chance took effect on 24 December 2024, making the Curaçao Gaming Authority the direct licensing and supervisory authority; the legacy "orange" sub-licence certificates ended on 15 October 2025; and licensing ceased for the four former master licensors between 18 August 2024 and 31 January 2025. The CGA's own rule is blunt: a historic /JAZ number or legacy seal must not be treated as independent proof that an operator currently holds a valid licence. That is not a British regulator being sniffy about a rival. It is the regulator retiring a system now asking the market to stop using its old paperwork as evidence.
Anjouan is a different story with a less tidy ending. The Anjouan Gaming Authority describes a framework founded on legislation adopted in 2005, with the Anjouan Offshore Financial Authority as the competent regulator and Anjouan Licensing Services Inc. as sole authorised licence administrator. An ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around €17,000 each per year, that Comoros financial intelligence officials described Anjouan Corporate Services as operating illegally, that a former attorney-general of the Comoros called Anjouan Licensing Services "an illegal entity", and that the AOFA was stripped of its status as a recognised regulator by Comorian banking laws passed in 2013 and 2015. The regulator says an independent legal opinion of 19 September 2024, reconfirmed in February 2026, confirms its authority.
I cannot settle that quarrel, and no British player needs to. Almost everything described in it is outside the scope of a Gambling Commission licence — which is the only licence under which GamStop applies, the only one behind the CMA undertakings the Commission states apply to all online gambling operators, and the only one where a payout delay can be measured by licence condition rather than by latitude. On 31 October 2021 the Commission banned reverse withdrawals outright under RTS requirement 14B: once a withdrawal is requested, the customer must not be offered the option to deposit those funds back. That rule exists because the temptation to reverse was doing measurable harm.
Questions About Casinos Without GamStop
Can a casino really operate without GamStop?
Yes, but only by holding no Gambling Commission licence, which makes offering gambling facilities to consumers in Great Britain an offence under section 33 of the Gambling Act 2005. Since 31 March 2020, participation in the national self-exclusion scheme has been a licence condition for every online operator, so an unlicensed site is not exempt from participation — it is outside the regime entirely.
Is using a casino without GamStop exclusion legal for the player?
For an adult placing a stake, the Act's general offences target those who provide facilities rather than customers; cheating under section 42 is the exception that catches players directly. That is a narrow answer to a narrow question. It says nothing about the money, the disputes or the tax position, and none of those become simpler offshore.
Do casino sites without GamStop pay out at all?
Many do, and some pay quickly, which is exactly why the model persists. The question to ask is what happens on the payout that does not arrive — because the Commission's rules against delayed withdrawals and unfair terms bind licensees only, and its contact centre can record a complaint about an unlicensed operator but cannot recover funds or adjudicate the dispute.
Where do pay by phone bill casinos without GamStop take the money from?
A phone-bill charge is a carrier billing route, not a payment service provider under the Payment Services Regulations 2017, which is why Commission licensees may not accept payment that way and why LCCP licence condition 5.1.2 exists. Offshore, the charge lands on a mobile account with deposit caps set by the network rather than by a regulator, and with no cooling-off or self-exclusion check behind it.
What is the catch with live dealer casinos without GamStop?
The catch is that live dealer tables rarely count fully towards bonus wagering. A published contribution chart can give live dealer games 0% unless stated otherwise while slots count 100%, so a bonus is close to unplayable at the tables a careful player would prefer. Offshore, there is also no £5 stake ceiling and no 2.5-second minimum game cycle to slow the pace.
Do casino websites without GamStop have to verify identity?
Anjouan's published standards require segregation of player funds, certified random number generators, anti-money-laundering controls and age verification. Whether those things happen is a different question, because enforcement capacity is thinner and there is no British regulator to complain to. Verification that arrives only at the withdrawal is the oldest complaint in this market.
Does an offshore site get round a self-exclusion?
No. Self-exclusion holds for its full term and stays in place until the person contacts GamStop to have it removed, and it cannot be cancelled while it runs. An unlicensed site is not covered by the scheme at all, which is a gap in the licence regime — not an exit from the exclusion. Anyone in difficulty in Britain should use the National Gambling Helpline on 0808 8020 133, free, 24 hours, every day.
The invoice comes after the headline
The offshore trade sells the absence of friction and bills for it in fees, delays and the loss of every remedy a licence buys — and the tell is arithmetic: 96.3% of 44.2 million licensed withdrawals cleared automatically, while 586 illegal sites were still findable in September 2026. The money staked offshore is counted in billions; the protections are counted in zeroes.