Gambling Sites Not on GamStop and Their Hidden Costs

Gambling sites not on GamStop are casinos and bookmakers holding no Gambling Commission licence, so the national self-exclusion scheme cannot reach them. They are not licensed in Great Britain, UK consumer protections do not apply, and a GamStop exclusion will not keep anyone off them. Their real cost shows up at the withdrawal stage.

A site that is not on GamStop is usually not on it because it cannot be. The scheme is a licence condition: since 31 March 2020, every online operator holding a Gambling Commission licence must take part, under social responsibility code provision 3.5.5 of the Licence Conditions and Codes of Practice, and by April 2020 operators had to screen their whole customer base at least every 24 hours. So the phrase describes a legal position rather than a feature. In April 2020 the Commission suspended the licences of two operators for missing that integration deadline, which tells you how seriously the paperwork is treated on this side of the line.

The market is not a secret, and it is not small. Commission analysis published on 5 November 2026 estimated that 2.5 per cent of people who had gambled online in the previous four weeks had engaged with an illegal gambling website. H2 Gambling Capital put the amount staked with illegal operators in the UK at £16.6 billion in 2025, up from about £5 billion in 2019. Meanwhile Great Britain's licensed industry generated £17.5 billion of gross gambling yield in the year to March 2026. Two markets, two rulebooks, and a border that is easy to walk across because it is invisible.

What follows is my read of the terms, the licences and the paperwork. The theme throughout is the one this whole site keeps returning to: the costs a player does not see at first.

What "not on GamStop" Actually Means

The scheme itself is the plainest thing on this page. GamStop Online, as it has been called since a website refresh in November 2025, is run by The National Online Self Exclusion Scheme Limited, is free, and has existed since April 2018. Registering blocks a person from every online gambling company licensed in Great Britain for six months, one year, five years, or five years with automatic renewal. Signing up takes minutes; the block can take up to 24 hours to bite. It cannot be cancelled during the term, and once the term ends the exclusion simply stays in place until the person contacts GamStop and asks for it to be removed. That is a fact, not a marketing line: the Group's 2025 annual report devotes a section to its refusal to remove registrations early.

The scheme's own terms of use are equally plain about its limits. It blocks websites and apps licensed in Great Britain and can only exclude from participating operators; it cannot stop access to services run by organisations that do not participate. One curiosity worth noting, because it catches people out in search engines rather than in law: the scheme's name is very often typed "gamestop", which is the games retailer, not the self-exclusion register. Same letters almost, entirely different thing.

There are separate schemes on the high street, which is where the confusion usually starts. Land-based casinos use SENSE, whose minimum period is six months, extendable to twelve; betting shops use GamStop Betting Shops, previously called MOSES, a telephone service on 0800 294 2060 with a fixed twelve-month term that cannot be ended early. Neither has anything to do with an offshore website.

The Licence Is the Whole Ball Game

When people ask what gambling sites are not on GamStop, the honest answer is: the ones with no Commission licence, because they have nothing to join. What they hold instead varies enormously, and the variation is where the money is.

Curaçao has rebuilt its regime. The National Ordinance on Games of Chance took effect on 24 December 2024, making the Curaçao Gaming Authority the direct licensing and supervisory body and ending the old master-licence and sub-licence system. Legacy "orange" sub-licence certificates ended on 15 October 2025, and the regulator's own guidance says a historic /JAZ number or an old seal must not be treated as proof of a current licence. A B2C licence costs a one-time non-refundable €4,592 to apply for, and €47,450 a year thereafter. That is the price of the paperwork. It is not a consumer-protection budget.

Anjouan, part of the Union of the Comoros, licenses internet gaming under legislation from 2005, publishes B2C licence issuance at €17,828 one-time and the same again annually, and states that its licences carry no territorial restrictions under Anjouan law while holders must comply with the laws of the jurisdictions where they operate. An ABC News investigation published on 31 December 2025 reported claims that more than 1,300 gambling licences had been issued at around €17,000 each per year, and quoted Comorian officials describing the licensing entity in unflattering terms. The regulator has since said publicly that its licence is not a universal authorisation to operate anywhere.

Kahnawà:ke has regulated interactive gaming since its Regulations were enacted in 1999, works through an Interactive Gaming Licence held by one entity plus Client Provider Authorizations, and requires licensed operators to be hosted at a specified data centre in the Mohawk Territory.

Malta is the odd one out here. A Malta Gaming Authority B2C licence is real, supervised and expensive: €5,000 to apply, €25,000 a year, plus five per cent gaming tax on revenue. It simply is not a British licence, so a Malta-licensed casino accepting UK players without a Commission licence is still trading unlawfully with them. The Authority even maintains a list of unauthorised URLs that misuse its name.

Costa Rica is not a licensing jurisdiction for this purpose at all. There is no comprehensive gambling licensing regime, the Legislative Assembly rejected the bill that would have created one in early 2026, and the "data processing licence" the industry sometimes cites is not a licence in the legal sense.

It is worth stating the legal position without decoration. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and it does not matter whether the operator holds a licence somewhere else. The Commission says so itself, and it is a matter of statute rather than opinion. For a player, that is mostly an observation about the other party's exposure, not a threat hanging over the account holder — the offence attaches to the person providing the facilities. The practical risk is not the magistrates' court. It is everything listed later in this piece.

How Identity Checks Actually Work

The check that decides how a night ends is not the licence. It is identity verification, and it behaves differently the first time and afterwards.

First time, a UK-licensed operator has to get the name, address and date of birth and verify them before they let a customer gamble, under Licence Condition 17, in force since May 2019. Many do it electronically against databases, credit reference agencies and the electoral roll, and it takes seconds. If it cannot, it asks for documents: passport, driving licence, household bill.

Later is where the trouble starts, and the Commission knows it. Over a quarter of complaints reaching its Contact Centre concern identity verification, a figure it reported in August 2026, and the complainants are almost always people asked for documents only when they try to withdraw. Licence Condition 17.1.1 is explicit that a withdrawal request must not trigger a demand for extra information if the operator could reasonably have asked earlier, though anti-money-laundering duties are carved out of that.

Offshore, none of this exists as an obligation with a regulator behind it. Anjouan's published standards do require age verification and AML controls, and Kahnawà:ke requires sites to let a player set limits, including zero. But these are the operator's promises inside a framework that has never audited them from Whitehall, and the fairest description of the UK-side comparator is the one the Commission gives: it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence, and that includes operators licensed elsewhere.

Payout Delays and the Terms That Buy Time

Anyone who has watched a withdrawal sit in "pending" will recognise the pattern. On the UK side, the Commission banned reverse withdrawals outright in October 2021 under technical standard 14B, so once a request goes in, the funds cannot be fed back into play; there is no queue to stand in. Licensees may not impose a maximum limit on withdrawals from a deposit balance — the Commission's own example of a prohibited term is "You may withdraw up to £50 per day and up to £500 per week". And the Commission's position is that where it has no regulatory concerns about a customer, there is no valid reason to delay a payout at all.

Offshore, terms that build in delay are not blemishes on an otherwise clean offer. They frequently are the offer. A maximum cashout clause, a wagering requirement that applies to money deposited rather than money granted, a cap on the size of a single withdrawal, a maximum bet while a bonus runs — each one is a term that a UK licence would make difficult or impossible, and each one can be discovered only by reading the promotion rules before playing.

Consider what a withdrawal actually costs on the payment side. Skrill charges 2.80 per cent on a withdrawal to a bank account, minimum €3.50, and Neteller the same 2.80 per cent with a $3.50 minimum; both deduct a monthly €5 or $5 service fee after six months of inactivity. Faster Payments carries over 90 per cent of transactions in under two seconds, and Visa Direct's Fast Funds service says funds can be available within 30 minutes of approval. In other words, the plumbing of a modern payout has never been faster or cheaper. A delay of days, and a fee subtracted at the other end, are policy choices rather than technical inevitabilities.

One Thing This Whole Topic Turns On

If I had to boil the subject down to a single mechanism, it would be the wagering requirement, and the reason is that it converts a headline into a bill.

The arithmetic is not complicated. The Gambling Commission caps wagering requirements in Great Britain at a maximum of ten times the bonus, under social responsibility code 5.1.1, in force since 19 January 2026. That change was deliberately aimed at extremes, and the Commission said at the time that the limit "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements". Offshore, there is no cap at all. Reported industry ranges for offshore welcome offers cluster between 25 and 50 times, with no-deposit bonuses sometimes higher and a cashout ceiling attached.

Ten, forty, sixty. The multiple is what the player is handed. What is not handed over is the rest of the equation: which games count towards it. One offshore operator's published contribution chart gives slots 100 per cent, table games 20 per cent, video poker and blackjack 10 per cent, roulette and baccarat 5 per cent, and live dealer games and craps 0 per cent. On that structure, a player who put the same £1,000 through roulette instead of slots would clear one twentieth of the required play. The multiple was never the real number. The weighted contribution was.

The warning signs are consistent. A single "playthrough" figure quoted without a contribution table. A requirement calculated on the deposit plus the bonus rather than the bonus alone. A cashout cap expressed as a percentage of the bonus. And the phrase "at their own discretion" attached to the operator's right to void winnings, which in Britain would be treated as unfair within the meaning of the Consumer Rights Act 2015 — a UK firm was fined £170,000 in July 2025 partly over a term of exactly that shape, and a £900,000 settlement in October 2026 included a fair-and-transparent-terms breach.

The other half of the mechanism is the deposit. UK guidance requires that a player may withdraw a deposit balance at any time, including while a bonus is pending, and that deposit and bonus balances be displayed separately. Offshore, one operator's terms state that if a deposit is made while a no-deposit bonus is active, the wagering requirement and the maximum cashout of that bonus still apply to it. That is the same money, and it is no longer entirely the player's.

Five Signs an Offshore Operator Can Be Trusted to Pay

There is no British regulator to appeal to when one of these goes wrong, which is why the checks matter more, not less. Each of these is a five-minute job.

1. The Licence Can Be Verified From the Regulator, Not the Site

Look for a licence number and a verification route that leads back to the regulator's own register rather than to a certificate image hosted on the casino's own server. Curaçao's Certificate of Operation Seal must redirect to the regulator's verification page, and its policy is explicit that a certificate showing a different domain from the one being accessed belongs to another operator. Kahnawà:ke's logo program generates a Certificate of Good Standing when clicked. A licence that cannot be confirmed anywhere but the operator's own footer is decoration.

2. Terms That a UK Licence Would Not Permit Are Absent

Read the promotion rules for a maximum cashout, a maximum withdrawal per day or per week, and wagering calculated on deposit plus bonus. Those clauses are legitimate offshore and prohibited or strongly constrained in Britain, so their presence tells you which rulebook is being applied to the account. The quarters to check: "Maximum cashout", "Withdrawal limits", "Wagering", "Bonus abuse". If the answer to any is expressed as a percentage of the bonus, that is a ceiling, not a promise.

3. Dispute Resolution Has a Named Route

A trustworthy operator names the alternative dispute resolution provider in its player-facing terms, with contact details, and lets a complaint be escalated after its own process runs out. Anjouan requires licensees to designate an approved provider and to expect complaints to settle within 30 days before escalation. In Britain the equivalent is a licence obligation to offer ADR free of charge if a dispute is unresolved after eight weeks. A site with no named provider has no second opinion to offer, which is the point.

4. The Customer-Funds Statement Says Which Rating Applies

Licensed operators in Britain must state in writing whether customer funds are protected on insolvency and pick one of three ratings — not protected, medium protection or high protection — with those rated "not protected" reminding the customer every six months. A serious offshore operator will say the same thing unprompted, because the statement is unflattering to make and therefore more informative when it is made. A site that never mentions insolvency has answered the question.

5. Payment Terms Are Stated Per Method, With Fees and Timings

A payout page that gives the same "instant" line for every method should be read with suspicion. MiFinity charges €1 for a VISA EEA withdrawal and €2 for Mastercard Interregional, with 1.8 per cent on crypto; Jeton's UK schedule shows local bank transfer in 0 to 30 minutes with no fee and instant bank transfer at 2.5 per cent; PayPal charges nothing for a UK bank withdrawal without conversion, but 3 per cent to a US bank. An operator that itemises this, rather than promising speed in general, has less to hide when something goes wrong.

How to Judge a Casino Before Depositing

1. Confirm who licenses the site, then check it at the source. Follow the verification route to the regulator's own register. The point is not the logo but whether the register recognises the domain in front of you — Curaçao's own policy says an unverifiable certificate should not be relied on, and a mismatched domain is the classic tell.
2. Decide what is being compared, because a British-licensed site is the baseline. Check whether the operator holds a Commission licence, or whether it is trading without one. Everything else — terms, dispute routes, fund protection — is measured against what a licensed site must do by rule rather than by choice.
3. Read every term attached to bonus money before the first deposit. Know what the multiple is, what counts towards it and what the cap on cashing out is. A figure on a banner without a contribution table is half a number, and the missing half is the one that decides whether the money is ever withdrawable.
4. Check withdrawal limits, processing times and fees per payment method. Look for a stated per-method page rather than a single promise. This is where a term that builds in delay usually hides, since it never appears in the headline offer.
5. Ask what happens to un-staked money if verification fails or the account goes inactive. In Britain, operators cannot confiscate a deposit balance because identity was not supplied or because the account went quiet, and money sits in a separate client account while betting is open it does not. Offshore, that answer comes from the terms and nowhere else.
6. Register with GamStop Online and install blocking software if self-exclusion is wanted at all. Registration blocks every Commission-licensed operator for the chosen term and then remains until the person asks for removal. Gamban and BetBlocker are the two tools the scheme itself signposts; BetBlocker says it blocks over 1,368,000 gambling websites and 3,100 apps, needs no registration and is free, while Gamban costs £4.99 a month in England and Scotland and is free in Wales. A bank block at card level sits alongside: most banks apply a 48 or 72-hour cooling-off before gambling payments resume. None of this reaches an unlicensed site — which is precisely why the first five steps have to be done before there is an account to lose.

Where the Cost Comes Out

The bill is not the stake. It is the withdrawal fee, the percentage of the payout that a cap removes, the effective contribution of the games actually played, and the hours between a request and cleared money. On the British side, the Commission's data for June to September 2024 recorded 44.2 million withdrawals by customers of large online operators, of which 96.3 per cent cleared automatically and 3.5 per cent within 24 hours. In practice, instant is normal here.

Offshore, the same player is trading a defined set of protections for a term sheet that need not disclose itself. Some of those operators pay properly, on time and in full. The ones that do can always be told apart from the ones that do not, because everything needed to distinguish them is published — the licence, the contribution table, the cap, the named adjudicator, the funds rating. A site with nothing to show but a licence seal that will not verify has already told you what terms will look like when they matter.

And if any of this touches something closer to home, help is free, confidential and available now: the National Gambling Helpline, run by GamCare, is on 0808 8020 133, twenty-four hours a day, every day of the year, with the same number reachable by live chat and WhatsApp. Callers in Wales can use 0808 2819 265. Gamblers Anonymous England, Wales and Ulster is on 0330 094 0322; NHS specialist gambling clinics have opened across England since 2019 and take self-referrals; Citizens Advice gives free help with the debt that often arrives alongside. None of those services cares whether the account was held under a British licence or not.

Questions I Get Asked About Sites Outside the Scheme

Are gambling sites not on GamStop legal?

For the operator, no: section 33 of the Gambling Act 2005 makes it an offence to provide gambling facilities without an operating licence, and the Gambling Commission states it is illegal to offer commercial gambling services to consumers in Great Britain without one, including where the operator is licensed elsewhere. For the player, the offence attaches to the person providing the facilities, so the exposure sits with the site rather than the account holder.

What gambling sites are not on GamStop?

Those holding no Gambling Commission licence, which means any offshore operator rather than a named list. They cluster around a few regulators: Curaçao, whose licensing moved to direct supervision by the Curaçao Gaming Authority from 24 December 2024, Anjouan in the Comoros, Kahnawà:ke in Canada, and a group that hold no meaningful licence at all, as is the case in Costa Rica.

Why do offshore gambling sites build in delay terms?

Because delay protects the operator's balance sheet rather than serving any regulatory aim. A maximum cashout, a withdrawal cap, a wagering multiple of forty instead of ten, a requirement that a bonus's terms keep applying to new deposits — each one reduces what leaves the site. Britain banned reverse withdrawals in October 2021 precisely because friction at the withdrawal stage tempted people to keep playing.

Can an offshore site still be trusted to pay?

Sometimes, yes, and the signals are checkable rather than felt. Verifiable licensing, no maximum cashout clause, a named alternative dispute resolution provider with published contact details, a customer-funds statement with one of the three stated ratings, and payment terms itemised per method with fees and times. A site that publishes all five is behaving better than it is obliged to. One that publishes none has told you the answer.

Does self-exclusion work on an unlicensed site?

No. GamStop Online only reaches operators licensed in Great Britain, and its own terms say it cannot prevent access to services run by organisations that do not participate. The exclusion holds for its full term, then stays in place until the person contacts GamStop to remove it, but no offshore site is obliged to check the register. Blocking software such as Gamban or BetBlocker and a card-level bank block are the layers that travel beyond the licence boundary.

Are there Welsh gambling sites not on GamStop?

The same set, since the licensing boundary runs through Great Britain rather than the countries within it. A Commission licence covers England, Scotland and Wales alike, so any operator trading here without one is unlicensed for all three. Callers in Wales do have a separate helpline number, 0808 2819 265, though 0808 8020 133 works from anywhere in Britain.

The Short Version, and One More Number

The gap between a licensed and an unlicensed casino is not the quality of the games, the size of the welcome offer or whether the site loads quickly; it is a legal boundary that determines who can be appealed to, which terms are permitted, and how quickly money comes back. A player who wants the protections has them, free, and a player who wants the offshore offer should at least price it correctly, with the contribution table and the cashout cap in front of them before the first deposit. At the end of 2025, GamStop recorded 561,983 active exclusions, and by July 2026 it reported 614,738 people currently on the register — of whom more than one in two had chosen the maximum five-year term. Whatever any offshore operator says about the scheme, it is not a niche people drift out of by accident.