Online gambling sites in the UK operate under a Gambling Commission licence, or they operate illegally. Licensed sites must join GamStop, apply the 10x wagering cap, and report themselves to the regulator. Offshore sites carry a Curaçao or Anjouan licence and none of those duties.
Anyone can find a list of online gambling sites in the UK. Finding one that is honest about what it costs is harder. The advertised price of a casino is the bonus; the real price is the licence it operates under, the time your money sits in someone else's account, and the terms that let an operator sit on a withdrawal while it decides whether it likes you. Those costs are not hidden exactly. They are disclosed in a document nobody reads and in a jurisdiction most players could not place on a map.
That is the angle I keep coming back to after years of covering this trade: the visible price is the least interesting number on the page. British-licensed sites are the standard of comparison here, not because they are saintly — the Commission fined operators £900,000 as recently as 21 October 2026 for unnecessarily delaying withdrawals — but because their obligations are written down, dated and checkable. Offshore sites get judged against that same standard, the reasonable ones and the cynical ones alike. And the first hidden cost of all is simple: an offshore site is not licensed in Great Britain, so none of the protections below apply to it. As of 7 November 2026, that is the single most useful fact in this market.
Table of Contents8
- What A British Licence Actually Buys
- The Withdrawal Question, In Numbers
- Comparing The Costs By Method, Not By Brand
- Five Signs A Site Can Be Trusted
- How To Check A Site Before Depositing Anything
- How Many Online Gambling Sites Are There In The UK?
- Questions About Online Gambling Sites
- The Price You Only See On The Way Out
What A British Licence Actually Buys
The licence is not a badge, it is a list of things the operator must do whether it wants to or not. Since 31 March 2020 every online operator must be part of GAMSTOP as a condition of its licence, and the requirement sits in the Commission's Licence Conditions and Codes of Practice, social responsibility code 3.5.5. (The scheme's name is often typed "gamestop"; the scheme itself is GamStop.) In April 2020 the Commission added a requirement to check the entire customer base against the register at least every 24 hours, which also stopped registered people receiving direct marketing.
Self-exclusion itself is worth stating plainly, because it is the fact most often bent out of shape. Registering with GamStop blocks a person from gambling with every online operator licensed in Great Britain for six months, one year, five years, or five years with auto-renewal. It can take up to 24 hours to take effect, and it cannot be cancelled or deactivated during the exclusion period. It also stays in place after the chosen term ends until the person contacts GamStop to remove it. An offshore site is not a way round that, and any site implying otherwise is selling a legal problem as a feature.
The rest of the licence is a price list, though the customer never sees the invoice. The statutory levy, commenced on 6 April 2025, charges online operators 1.1 per cent of previous-year Gross Gambling Yield; in its first year it raised just under £120 million, ringfenced for research, prevention and treatment. A remote casino faces a five per cent annual regulatory return bill of another kind: its own fair-terms obligations, enforced after the fact. In October 2026 the Commission's settlement with an operator, which ran seven websites, was £900,000 and included a term stating customers could request only one withdrawal at a time.
Safer Gambling Duties You Can Check
The duties are dull and specific, which is what makes them checkable. Financial vulnerability checks became a licensing requirement in August 2024 at £500 net deposits over a rolling 30 days, lowered to £150 effective 28 February 2025. From 31 October 2025 every gambling business must prompt a customer to set a financial limit before the first deposit, present that as the default option under RTS 12E, and remind customers every six months to review their account information. Online slots carry a £5 maximum stake per game cycle for adults and £2 for those aged 18 to 24, live since 9 April 2025 and 21 May 2025 respectively.
The pattern is worth noticing: British rules arrive with a date, a threshold and a document. Offshore rules arrive as a paragraph in the terms.
- A named regulator with a public register. The Gambling Commission advises checking the licence and clicking through to the register to see whether the site's activities and domain names match.
- A named exclusion scheme. Membership of GamStop, with 24-hour batch checking of the whole customer base.
- A named complaints route. Licensed operators must offer referral to an approved alternative dispute resolution provider, free of charge, if a complaint is unresolved after eight weeks.
The Withdrawal Question, In Numbers
Here is the benchmark I use, and it comes from the regulator rather than the marketing department. Gambling Commission data covering June to September 2024 recorded 44.2 million withdrawals by customers of large online operators: 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours, and 0.1 per cent took up to 48 hours. That is the British baseline for payout speed, and it is a good one — publicly reported, with a stated period, from a primary source.
Then comes the part the adverts leave out. The Commission's Contact Centre receives over 6,000 calls a year, and problems with withdrawals from accounts are the number one topic consumers raise; by July 2024 the Commission said it was still receiving around 2,000 complaints a year about withdrawal delays. Its Annual Report and Accounts 2024-25 states that withdrawal issues continue to cause most of the complaints it receives. Consumer research published 23 July 2026 found 49 per cent of people who had gambled in the past 12 months agreed it is quick and easy to withdraw winnings, 33 per cent were neutral, and 18 per cent disagreed.
Mechanically, the rules are stricter than most players assume. Reverse withdrawals — the option to cancel a pending withdrawal and put the money back into play — were permanently banned for all remote operators under RTS requirement 14B, in force since 31 October 2021. Licence condition 17.1.1 says a withdrawal request must not trigger a demand for extra information the licensee could reasonably have asked for earlier, though anti-money-laundering rules can still justify a request made under another legal obligation. Licence condition 7.1.1 requires terms to be fair within the meaning of the Consumer Rights Act 2015. There is, notably, no fixed maximum number of days in the LCCP within which a withdrawal must be completed. The regime relies on fair-and-open terms and the identity-verification condition rather than a stopwatch. That gap is both the honest answer to "how long does a payout take" and the reason the complaint figures refuse to fall.
Where Identity Checks Sit In The Queue
Over a quarter of complaints reaching the Commission's Contact Centre concern identity verification, and it is one of the most common dispute types referred to ADR providers. The trigger for checks in a remote casino is set in the Money Laundering Regulations: identification and verification are required when a customer deposits, or withdraws funds or winnings, amounting to €2,000 or more, and the threshold applies both to a single transaction and to transactions that appear linked. Licence condition 17, in force since 7 May 2019, separately requires name, address and date of birth to be verified before a customer is permitted to gamble.
The first time, on a well-run British site, verification is usually electronic and invisible: matching the account against credit reference agencies and the electoral roll means no documents are needed, and the Commission says an electronic process may be instant. Later, once deposits climb or a withdrawal is requested, a document request can appear — a passport, a driving licence, a household bill, sometimes a bank statement for source of funds. The warning signs are structural rather than personal. A site that asks for documents for the first time at the withdrawal stage is on thin ice under 17.1.1. A site whose onboarding accepted initials instead of a full name, or a commercial address instead of a residential one, has been criticised by the Commission itself, which warned in August 2026 that mismatches with records held elsewhere undermine the effectiveness of self-exclusion.
Bonus Terms and the Ten-Times Ceiling
From 19 January 2026 the Commission capped wagering requirements on bonus funds at ten times, via social responsibility code 5.1.1. The Commission chose a cap over a ban and said the limit "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements". The same rule bans mixed-product promotions requiring two or more types of gambling: "Bet £5 and get £10 free bet" is compliant, "Bet £5 to get 20 free spins" is not.
A wagering requirement, as the code defines it, is where a customer must make wagers totalling a particular value for funds to become withdrawable. Ten times is the British ceiling, enforced, with a date. Offshore terms still run higher — trade coverage describes offshore welcome offers as typically 25x to 40x, though the multiplier is only half the trap. The other half is the maximum cashout clause, which caps how much of a bonus-derived win is ever payable, and the maximum bet while wagering, which voids winnings for staking a few pounds too much.
Comparing The Costs By Method, Not By Brand
I have deliberately left brand names out. What follows compares the structures a player is actually choosing between: which licence sits behind the site, what the terms permit, and what happens when something goes wrong. Figures are the ones the operators or regulators publish.
| Licence and where it sits | Typical licence cost to the operator | Bonus ceiling | Exclusion and complaints |
|---|---|---|---|
| Great Britain, Gambling Commission | Statutory levy at 1.1% of prior-year GGY, plus annual fees | Wagering capped at 10x from 19 January 2026 | GamStop mandatory since 31 March 2020; free ADR referral after eight weeks |
| Curaçao, under the LOK from 24 December 2024 | One-off EUR 4,592 application; EUR 47,450 a year | Not bound by the 10x cap | Not connected to GamStop; ADR is an operator-chosen provider |
| Anjouan | EUR 17,828 to issue, EUR 17,828 to renew annually | Not bound by the 10x cap | Not connected to GamStop; operator must name an approved ADR provider |
| Malta, MGA | EUR 5,000 one-off application, EUR 25,000 a year, 5% gaming tax | Not bound by the 10x cap | Not connected to GamStop; complaint form reviewed in English or Maltese |
| Costa Rica, no licensing regime | No comprehensive framework; the "data processing license" is not a licence in the strict legal sense | Unspecified | No UK route at all |
Two things in that table deserve their own sentence. First, the cheapest licences are the ones sold most aggressively to the players least able to absorb the consequences. Anjouan's published fee is EUR 17,828 a year and its certificates carry a QR code to a public register; the ABC News investigation published on 31 December 2025 reported that the authority's licensing arm claims to have issued more than 1,300 gambling licences, and that a former attorney-general of the Comoros described that licensing entity as "an illegal entity". Anjouan Gaming itself said on 10 June 2026 that its licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world". Read that sentence twice. It concedes the point that matters in Britain.
Second, the Curaçao reform has not simplified matters as much as the trade press implies. The legacy "orange" sub-licence certificates of operation ended on 15 October 2025, licensing activity ceased for the four former master licensors between 18 August 2024 and 31 January 2025, and the CGA said on 7 October 2026 that its previous online portal would not return to service, affecting the old digital licence seal. A historic /JAZ number is not proof of anything current.
Five Signs A Site Can Be Trusted
Each of these is a check, not a compliment. None of them costs anything but a minute.
The Licence Matches The Domain
The Gambling Commission's register lists a licence holder and the domain names attached to it. Click through and compare. A site displaying a licence number, a seal or a regulator's logo without a matching domain entry has answered the question already. For Curaçao, the CGA's certification policy is unusually blunt: clicking its Certificate of Operation seal must redirect to the cert.cga.cw domain, a certificate showing a different domain from the one being browsed belongs to another operator, and a differing seal design means the site is not authorised.
The Withdrawal Terms Appear Before The Deposit
A site worth using tells a customer what documents might be requested, in what circumstances and in what form, before permitting a deposit — which is what licence condition 17 expects. The tell is timing. Terms that disclose identity requirements on the withdrawal screen, and nowhere else, are the classic pattern behind the Commission's complaint statistics.
The Bonus Has One Number, Not Five
Look for a single stated wagering multiplier and a stated maximum cashout. If the terms say the operator "may" or "reserves the right" to void winnings, that is the term the Commission's fair-terms guidance treats as unfair under the Consumer Rights Act 2015, and it is the same shape of clause that formed part of the Fafabet penalty of £170,000 in July 2025.
It Says Out Loud That GamStop Applies
Licensed operators must participate in the national scheme; participation means 24-hour checks of the entire customer base. A site that mentions self-exclusion vaguely, or offers to "help with" it, or quietly markets to people who are excluded, is not describing a service. The Commission's warning notice of 20 January 2025 said unlicensed sites often target customers who have self-excluded via GamStop and may have inadequate social responsibility and anti-money-laundering controls.
There Is A Named Complaint Route That Costs Nothing
Licensed operators must let customers refer an unresolved dispute to an approved ADR provider, free of charge, after eight weeks. In the ADR data, eCOGRA's Great Britain report for 1 October 2024 to 30 September 2025 recorded 911 disputes, of which 150 valid ones concerned deposits and withdrawals, with an average domestic resolution time of 31 days. IBAS's 2024-25 report recorded 3,721 domestic disputes and reported 100 per cent operator compliance with decisions in the consumer's favour.
How To Check A Site Before Depositing Anything
Ordinary, lawful checks. None of them require an account, and none require a deposit.
- Pull the licence from the regulator's own register, not the site's footer. Compare the licensed entity and the domain list against the address bar. The extra minute is the whole point: the register is the only source the site cannot edit.
- Read the bonus terms for the multiplier, the maximum cashout and the maximum bet while wagering. These three numbers decide what a bonus is worth far more than the headline amount does. A 25x multiplier with a 300 per cent cashout cap is a smaller offer than the banner suggests.
- Find the withdrawal page and check what it says about documents and timing. Licence condition 17.1.1 exists precisely so the requirements can be disclosed early. Where the site puts them tells a player which regime it is actually running.
- Check the insolvency rating in the customer funds disclosure. Licence condition 4.2.1 requires operators to state whether funds are protected if the business fails, at what level, and by what method — one of "not protected", "medium protection" or "high protection" — and to remind customers every six months where funds are not protected.
- Confirm the site is in GamStop's world, not adjacent to it. A licensed operator checks the register as a routine. This matters most for anyone whose excluded status is the reason an offshore operator is reportedly interested in them at all.
- Keep the deposit small and the first withdrawal smaller. A first withdrawal of a modest sum tests the whole machine — verification, processing, timing — at a price worth paying. It also generates the paper trail that a complaint or an ADR referral needs later.
The costs those six steps expose are the ones no advertisement mentions: the fee buried in a payment method, the currency conversion applied on the way out, the three days of an operator's review. None of them are illegal. All of them are price.
How Many Online Gambling Sites Are There In The UK?
There is no single honest total, and anyone quoting one should be asked what they counted. The Gambling Commission reported 586 illegal gambling websites accessible to GB consumers identified in September 2026, four per cent less than the previous three-month average but four per cent more than September 2025. In the earlier monitoring period from May 2024 to July 2025, just over 1,000 unique illegal gambling websites were accessed by consumers in Great Britain, and the number identified through the Commission's affiliate-page method rose from 364 in May 2024 to 535 in July 2025.
The licensed side is not published as a neat count either, and the reason is structural: one licence can cover a portfolio. The L & L Europe settlement in October 2026 covered seven websites; a single licensee can run many domains, and a brand can move between licence holders. What is countable is the customer base. GAMSTOP reported 614,738 consumers on the register as of July 2026, and H2 Gambling Capital estimates the amount staked with illegal operators in the UK reached £16.6 billion in 2025, up from about £5 billion in 2019.
Questions About Online Gambling Sites
What are the best online gambling sites in the UK?
Best is a category the regulator does not publish, so it has to be defined. Here it means the site closest to the British standard: a Gambling Commission licence matching the domain, withdrawal terms disclosed before the deposit, one stated wagering multiplier within the ten-times cap in force since 19 January 2026, a named free ADR route, and membership of GamStop. Everything else is decoration.
Is it safe to use an offshore site from the UK?
Safe is not the right frame. An offshore site holds no Gambling Commission licence, so it is outside the register, outside the ten-times wagering cap, outside the free ADR obligation and outside GamStop. Section 33 of the Gambling Act 2005 makes it an offence to provide gambling facilities without a licence, and the Commission states this includes operators licensed in another jurisdiction but trading here.
How fast should a UK-licensed casino pay out?
The regulator's own benchmark is the one to hold them to. Data covering June to September 2024 recorded 44.2 million withdrawals by customers of large online operators: 96.3 per cent cleared automatically, 3.5 per cent within 24 hours, 0.1 per cent up to 48 hours. Earlier Commission data showed some of the largest firms approving and fulfilling around 99 per cent of requests within 24 to 48 hours.
Can a casino ask for ID only when I withdraw?
It can ask, but the timing is regulated. Licence condition 17.1.1 says a withdrawal request must not result in a demand for information the licensee could reasonably have requested earlier, though separate anti-money-laundering obligations can still justify a later request. The Commission reported in August 2026 that over a quarter of complaints to its Contact Centre concern identity verification.
Do new online gambling sites in the UK start with weaker protections?
No, and that is the practical advantage of the licence regime. A new operator needs a Gambling Commission licence before it takes a British pound, and that licence already carries GamStop membership, the ten-times wagering cap from 19 January 2026 and the fair-terms condition. The risk in a new site is commercial, not regulatory: unproven payment operations and a short complaints history.
How many online gambling sites are there in the UK?
No reliable licensed count is published, partly because one licence can cover many domains — the October 2026 settlement with one licensee covered seven websites. The illegal market is measured instead: the Commission identified 586 illegal sites accessible to GB consumers in September 2026, and just over 1,000 unique illegal sites were accessed in Great Britain between May 2024 and July 2025.
What is the single biggest hidden cost?
The delay, not the fee. The Commission receives around 2,000 complaints a year about withdrawal delays and says withdrawal issues remain the leading cause of complaints reaching it. Every day that a payout sits in an operator's account is a day the money is working for them and not for the person who won it. Reverse withdrawals are banned, but slow review is not.
The Price You Only See On The Way Out
The sites that dominate British search results are not the ones with the best terms; they are the ones with the best marketing, and those are rarely the same thing — the honest ones tend to compete on speed and disclosure, which are dull, while the expensive ones compete on headline bonuses, which are not. What separates them is a licence, a document and a date. The National Gambling Helpline, run by GamCare, is free on 0808 8020 133, 24 hours a day, every day, and callers in Wales can use 0808 2819 265. On 10 October 2025 the Commission updated its Statement of Principles for Determining Financial Penalties — the paperwork that decides how much an operator pays when the terms it wrote were not fair.