Online Gambling UK and the Cost of the Licence

Online gambling in the UK is legal, but only through operators holding a Gambling Commission licence, which must be part of GamStop, verify identity before play and cap bonus wagering at ten times. Offshore sites carry no such licence and no such duties, so the protections built into the British market simply do not exist there.

Great Britain's online gambling market is a big, taxed, closely watched machine, and it is worth knowing what it actually looks like before comparing anything. Gross gambling yield for the whole industry was £17.5 billion in the year to March 2026, up 4.4 per cent, of which remote casino, betting and bingo took £8.3 billion. In a single quarter, January to March 2026, online GGY reached £1.55 billion across 26.8 billion bets and spins. Those are Gambling Commission figures, published in September 2026 and May 2026 respectively, and they describe the licensed market only.

The trouble with a market that size is that every cost in it is engineered to be invisible. A stake limit is visible. A licence number in the footer is visible. What is not visible is the delay between a click and a payment, the bonus term that quietly converts a withdrawal into a wagering exercise, or the fact that the site's regulator sits in a jurisdiction with no power — and no duty — to give anyone their money back. This page looks at online gambling in the UK from that angle: not what the lobby looks like, but what it costs.

Is Online Gambling Legal in the UK?

Yes — and the shape of that legality matters more than the yes. It is illegal for anyone to provide facilities for gambling in Great Britain without an operating licence, under section 33 of the Gambling Act 2005, and the Gambling Commission has said plainly that this includes an operator holding a licence in another jurisdiction. A person guilty of the offence faces up to 51 weeks in prison, a fine up to level 5 on the standard scale, or both, and it is immaterial whether the facilities are offered inside or outside the UK.

Notice where the offence sits. It attaches to the provider, not the player. That is why the entire enforcement apparatus here points at the supply side: since April 2024 the Commission's Illegal Markets team has issued 3,140 cease and desist and disruption notices, referred 447,778 Google and Bing URLs and secured 287,961 removals. Across 160 illegal websites with traffic data, engagement fell 32 per cent on average after disruption. Registrar blocks did the most damage, cutting engagement by an average of 91 per cent, against 30 per cent for a Google removal. Search removal hides a site; a registrar block shuts the door.

A Benchmark From the Licence Register

The checkable number on this page is a licence count, and the source is the Gambling Commission's public register, which anyone can open. The point of the register is not the total — the Commission's own licence register is the only place where a site's domains, trading names and permitted activities can be confirmed against its licence, and the Commission has advised consumers to click through and check that the domains match. A licence certificate that does not list the domain in front of you is not confirmation of anything.

The Commission's methodology for sizing the unlicensed market combines web-traffic data with a licensed-play assumption of £0.32 GGY per minute for online slots, and it explicitly notes that it does not capture activity hidden behind VPNs. That caveat is the honest part of the estimate and the reason to treat black-market totals — £16.6 billion staked in 2025 on H2 Gambling Capital's estimate, £2.7 billion a year on Frontier Economics' more conservative one for the Betting and Gaming Council — as direction, not arithmetic.

How Many Sites and How Many Players

The market is broad and shallow-ended. Average monthly active online accounts in January to March 2026 were 13.4 million, down 1 per cent year on year, while online slots alone ran 25.1 billion spins in the quarter and 4.8 million average monthly active accounts, up 6 per cent. Fewer people, more spins. That is a market where revenue comes from depth of use, not breadth of reach.

On the other side of the ledger, the Gambling Survey for Great Britain's third annual report, published on 16 July 2026 from 20,775 adults, found 47 per cent had gambled in some form in the past four weeks — 27 per cent once lottery-only players are excluded — and 2.4 per cent scored 8 or more on the Problem Gambling Severity Index, a figure the Commission describes as stable across three survey years at 2.5, 2.7 and 2.4 per cent. Of those who had gambled in the past 12 months, 3.4 per cent had sought support for their own gambling.

The Hidden Costs of an Offshore Licence

An offshore site is not licensed in Great Britain. When you play on one, the protections listed below do not apply, and neither does the route to help if things go wrong. That is a statement about jurisdiction, not about any particular operator's intentions.

The licence fee schedule tells you a great deal about the supervision behind it. A Curaçao B2C licence costs a one-off application fee of €4,592 plus €150 per ultimate beneficial owner, then €47,450 a year — €24,490 to the National Treasury and €22,960 to the regulator. Malta's B2C route costs a €5,000 application fee, €25,000 a year, and requires paid-up share capital of €100,000 for Type 1 and Type 2 licences; gaming tax is 5 per cent of revenue. A Kahnawà:ke Client Provider Authorisation costs USD 35,000 to apply, rising to USD 40,000 on 1 January 2027, plus USD 20,000 a year, and the permit-holder must be hosted at a single data centre in the Mohawk Territory of Kahnawà:ke. Anjouan's B2C licence is €17,828 to issue and €17,828 to renew annually, with €500 per extra domain. Costa Rica, meanwhile, has no comprehensive gambling licensing regime at all — the "data processing licence" the industry sometimes cites is not a licence in the strict legal sense, and a bill that would have introduced mandatory licensing was rejected in early 2026.

The right-hand column is where the real cost sits. A British-licensed operator must refer an unresolved dispute to an ADR provider free of charge if it is not settled within eight weeks, and eCOGRA's report for October 2024 to September 2025 records 911 disputes received, an average 31 days to resolve domestic ones, and 17.8 per cent decided in the consumer's favour. IBAS handled 3,721 domestic disputes in 2024–25 with an average 20 days to completion and reports 100 per cent operator compliance with decisions in the consumer's favour in both 2023–24 and 2024–25.

Curaçao Dressed Up as Regulation

The Curaçao reform is the most misrepresented paperwork in the industry. Its National Ordinance on Games of Chance took effect on 24 December 2024, replacing the old master-licence and sub-licence model with direct licensing by the Curaçao Gaming Authority, and the legacy "orange" sub-licence certificates ended on 15 October 2025. Licensing by the four former master licensors ceased on staggered dates: Gaming Curaçao on 18 August 2024, Curaçao eGaming on 1 October 2024, Antillephone on 1 November 2024 and Curaçao Interactive Licensing on 31 January 2025.

So a historic /JAZ number in a footer proves nothing, and the regulator says as much. The CGA issues two different seals. A Certificate of Operation Seal goes only to B2C operators, only for an approved player-facing domain, and clicking it must redirect to cert.cga.cw. The regulator's own policy states that if the certificate behind a seal shows a different domain from the site you are on, the site is displaying another operator's certificate and should be treated as unauthorised or fraudulent. It also warns that the previous online portal is not returning to service and that the old digital seal may be affected while an alternative verification mechanism is built. An operator holding both a B2B and a B2C Curaçao licence is not permitted either.

Anjouan, Where the Stamp Is Cheap

Anjouan's selling point is that its internet gaming licences contain no territorial restrictions under Anjouan law. Read the rest of that sentence and it becomes a warning: holders must still comply with the laws of the jurisdictions in which they operate — and in Great Britain, that means holding a Commission licence. Anjouan Gaming itself said in a statement on 10 June 2026 that its licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world", and that no licensing authority can exempt an operator from local law.

The stamp has a price. ABC News reported on 31 December 2025 that Anjouan Licensing Services claims more than 1,300 gambling licences issued at around €17,000 each per year, that Comoros financial intelligence officials described Anjouan Corporate Services as operating illegally, and that a former attorney-general of the Comoros called the licensing entity "an illegal entity" — with the Anjouan Offshore Financial Authority stripped of recognised-regulator status by Comorian banking laws passed in 2013 and 2015. Anjouan Gaming rejects that account and cites an independent legal opinion from a firm regulated in England and Wales and Quebec, issued on 19 September 2024 and reconfirmed in February 2026, that the authority is lawful. That claim comes from the regulator's own licensees rather than a court, so it is reported here rather than settled.

The Terms That Build in Delay

Delay is written into some cross-border terms rather than applied case by case. Kahnawà:ke, for instance, states that its voluntary self-exclusion is permanent and irrevocable, and that a player who breaches a self-exclusion prohibition forfeits funds deposited or won to a third-party charity chosen by the Commission. That is a strong deterrent and a harsh one. The KGC's Client Provider Authorisation for Polar Ventures SDRL was suspended on 29 September 2026 following a Show Cause Notice — a reminder that even the older offshore regimes move, and that a permit can be gone between one deposit and the next.

Identity Checks at the Door

Age and identity checks are the single thing this market turns on, because they decide when money can leave. Licence Condition 17 has required since 7 May 2019 that a licensee establish a customer's identity before allowing them to gamble; the information must include name, address and date of birth, and licensees should tell customers before the first deposit what documents might be needed. In practice most of it happens silently: companies match the account against credit reference and electoral roll data, in which case no paperwork is asked for at all.

The anti-money-laundering side runs on a threshold. Under the Money Laundering Regulations 2017, a remote casino must identify and verify a customer when they deposit or withdraw €2,000 or more, and the threshold applies both to a single transaction and to transactions that appear linked — same player, same session, same logged-on period. A casino may identify and verify age at registration and defer full verification to that threshold, which the Commission calls the hybrid approach. It is lawful, and it is precisely why a first withdrawal can suddenly produce a request for a passport.

The first withdrawal is also where the rules bite hardest on the operator. Licence Condition 17.1.1 says a withdrawal request must not trigger a demand for information the licensee could reasonably have asked for earlier, and the Commission has said that delaying a withdrawal over insufficient ID may be a breach of that condition and a matter for regulatory action. Its own guidance is blunt that friction belongs at deposit, not withdrawal, and it will not accept delays made for safer-gambling purposes where it has no regulatory concern. Where it does accept delay is narrow: money-laundering obligations may require a Suspicious Activity Report and a defence from the National Crime Agency before funds move — but the Commission states those obligations never permit confiscation of a deposit.

Warning signs are worth learning. Onboarding on a nickname or initials rather than a full name, or using "fuzzy matching" through a third-party verifier, is exactly what the Commission flagged in August 2026 — and it has a consequence beyond the account, because a middle name entered where a forename belongs can create a mismatch with GamStop records and quietly undermine the exclusion itself. The other warning sign is a term that lets a site withhold winnings at its own discretion. That is not a commercial preference; it is unfair within the meaning of the Consumer Rights Act 2015, and it has been priced: a £170,000 penalty in July 2025 turned partly on a term reserving the right to close accounts or forfeit winnings at the operator's discretion, and a £900,000 settlement in October 2026 included a fair-and-transparent-terms breach. You cannot confiscate a deposit for failing identity verification either. The Commission's guidance is clear that un-staked deposits remain the customer's.

Five Signs a Site Can Be Trusted

The Licence Names the Domain You Are On

Click through to the Gambling Commission's public register and check that the domain in front of you appears against the licence, along with the trading names and activities. A licence number in a footer, or a seal hosted on the operator's own server, proves nothing at all. For any site claiming a Curaçao licence, click the Certificate of Operation Seal: it must redirect to cert.cga.cw, and the certificate shown must name the same domain you are visiting.

GamStop Registration Is Actually Enforced

A British-licensed operator must participate in the national multi-operator self-exclusion scheme under licence condition 3.5.5, and since April 2020 must check its whole customer base against it at least every 24 hours, which also blocks direct marketing to registered people. The check is not whether a site mentions the scheme, but whether it can demonstrate that a registration stops you being onboarded. Onboarding on partial or inaccurate identity data defeats exactly this.

Withdrawal Terms Are Honest About Time and Limits

Look for a stated processing time, and look for any term limiting how much or how often you can withdraw. The Commission's guidance treats a term such as "You may withdraw up to £50 per day and up to £500 per week" as prohibited, and consumers are entitled to withdraw a deposit balance at any time, including while a bonus is pending. A cost-reflective processing fee and reasonable limits on the number or size of separate withdrawals are permitted, but only under a clear term shown before the deposit.

Funds Are Protected on Paper, Not Just in a Sentence

Remote operators must hold customer funds in a separate client account, and must declare one of three ratings — not protected, medium protection or high protection — in their terms, with a reminder every six months if funds are not protected. Note what a separate account is not: it is not insurance, and a business may legally hold customer money in an overseas bank account. Money already staked on an open bet is not customer funds at all.

Complaints Reach an Independent Adjudicator

A licensee must let a customer refer an unresolved dispute to a Commission-approved ADR provider free of charge once eight weeks have passed without resolution, and providers include IBAS, eCOGRA, CEDR, ADR Group, ProMediate, Pegasus and Blexr. The practical check is whether the site names its provider and whether the internal complaints route is real — 361 of 499 invalid eCOGRA disputes in 2024–25 had never been through the operator's own procedure first.

How to Check an Operator Before You Deposit

1. Verify the licence on the register, not on the site. Open the Commission's public register and confirm the domain, the trading name and the activities against the licence entry. Reason: the register is the only record a site cannot edit.
2. Confirm the site is in GamStop, and understand what that means. A registered exclusion blocks play with every participating GB-licensed operator, and the exclusion holds for its full term — six months, one year, five years or five years with auto-renewal — and then stays in place until the person contacts GamStop to remove it. Reason: knowing how the block works is the difference between relying on it and assuming it.
3. Read the withdrawal clause before the bonus clause. Check the processing time, any fee, any limit on the number or size of withdrawals, and whether funds can be withdrawn while a bonus is active. Reason: the exit is where the terms are tested, and this is the number-one subject of complaints to the Commission's contact centre.
4. Read the bonus terms as a contract, not an advertisement. In the UK, wagering requirements on bonus funds are capped at ten times and mixed-product promotions requiring two or more kinds of gambling are banned — both in force since 19 January 2026. Reason: the cap tells you the difference between a British licence and an offshore one at a glance, where multipliers of 25x, 35x or 50x are ordinary.
5. Set a financial limit when the site asks. Since 31 October 2025, operators must prompt customers to set a financial limit before the first deposit, must offer a free-text limit at account level and must remind customers to review every six months — and declining must be an active choice. Reason: the prompt is a free, built-in brake that costs nothing to use.
6. Pick the right forum first if something goes wrong. Start with the operator's own complaints procedure, then ADR after eight weeks; and where the dispute is about an unlicensed site, the Commission cannot recover money for an individual because it is a regulator and not an ombudsman. Reason: the route you take on day one decides whether you have a route at all.

What GamStop Does and Does Not Cover

GamStop — the scheme's name is written that way, though it is often typed "gamestop" — is the UK's national online self-exclusion scheme, run by The National Online Self Exclusion Scheme Limited and free to use. It has been available to consumers since April 2018 and was renamed Gamstop Online in November 2025 following a website update, with the betting-shop scheme formerly known as MOSES becoming Gamstop Betting Shops. Registration takes a few minutes and can take up to 24 hours to become effective.

The limits are what matter. GamStop blocks access to gambling websites and apps licensed in Great Britain only, and can only exclude from participating operators; it cannot prevent access to services run by organisations that do not participate. Offshore sites holding no Commission licence are not connected to GamStop and are not covered by it, because the participation duty applies only to UKGC-licensed operators — a position stated by trade and press sources rather than on a primary regulator page, though consistent with GamStop's own terms of use. It should not be read as a gap to be exploited. The Commission's own warning notice of 20 January 2025 flagged unlicensed sites targeting customers who have self-excluded through GamStop, often with inadequate social responsibility and anti-money-laundering controls.

The land-based schemes are separate and worth knowing about for anyone who assumes one registration covers everything. SENSE covers all licensed land-based casinos in Great Britain, with a minimum six-month exclusion extendable to twelve, removal only in person at a casino during the six-month "Thinking" period, and a 24-hour cooling-off period; a Commission FOI response in May 2026 put active SENSE customers at 12,445 between 1 April 2025 and 1 April 2026. Gamstop Betting Shops is telephone-based, excludes a customer from named bookmakers' shops for a fixed 12 months, cannot be ended early, and covers approximately 6,000 shops across more than 60 operators, with 9,075 active customers in the same period. Arcades self-exclude through a scheme run by the trade body BACTA and by Boomerang Digital, and bingo clubs through a scheme run by the Bingo Association.

The Hidden Cost of Waiting to Be Paid

Reverse withdrawals are gone, and that is a genuine win for players. Requirement 14B has stated since 31 October 2021 that consumers must not be given the option to cancel a withdrawal request, and the Commission's reason was direct evidence that the reverse function tempted engaged and vulnerable players to keep going. The question now is not whether a withdrawal can be cancelled, but how long it sits there.

The Commission's own data, covering June to September 2024, records 44.2 million withdrawals by customers of large online operators: 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours and 0.1 per cent took up to 48 hours. On that evidence, British-licensed payouts are fast. Consumer sentiment is cooler: research published in July 2026 found 49 per cent of people who had gambled in the past 12 months agreed that it is quick and easy to withdraw winnings, 33 per cent were neutral and 18 per cent disagreed.

Now the bill. Withdrawals remain the single largest source of complaints to the Commission, and its 2024–25 annual report says the issue persists despite work with operators. Complaints coded "Withdrawals and/or financial transactions" ran 2,416 in the year to December 2022 and 1,791 in the year to December 2025 — fewer, but still the top category. Over a quarter of complaints to the Commission's contact centre now concern identity verification, raised when documents are demanded only at the point of withdrawal. Commission guidance tells operators to explain any delay or refusal to the customer, subject to the tipping-off prohibition, and states there is no valid reason to delay a payout where it has no regulatory concerns. Note what the LCCP does not contain: any fixed maximum number of days for completing a withdrawal. The regime relies on fair-and-open terms, the identity-verification condition and the unfair-terms prohibition instead of a deadline — which is why terms, not promises, are what a careful player reads.

The mechanics underneath matter too. Bitcoin targets a ten-minute average block interval, with about a 63 per cent chance of a block within any ten minutes and six confirmations treated as final by most services that bear double-spend risk. Litecoin targets 2.5 minutes per block, about 15 minutes to six confirmations, though only around 55.43 per cent of modelled six-confirmation spans actually complete inside 15 minutes. E-wallets take their own cut: Skrill and Neteller both charge 2.80 per cent to withdraw to a bank account, minimum around €3.50, plus a 4.49 per cent foreign-exchange fee where conversion is needed. MuchBetter states withdrawals can take from a few hours to five business days. And since 31 January 2024, a British-licensed operator may only accept payment from GB customers through a provider that is a payment service provider under the Payment Services Regulations 2017 — which is a guarantee of the route, not of the speed.

Is Online Gambling Legal in the UK? Your Questions Answered

Is online gambling legal in the UK without a British licence?

No. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and the Gambling Commission states this includes an operator licensed elsewhere but operating here without a Commission licence. The offence attaches to the provider, not the player, so enforcement targets sites and their payment and hosting routes rather than individuals.

How many online gambling sites are there in the UK?

Nobody knows exactly, and any site claiming a precise figure is bluffing. The Commission's dashboard recorded 586 illegal gambling websites accessible to GB consumers in September 2026, and since April 2024 it has referred 447,778 Google and Bing URLs. The licensed population visible in a Gambling Commission register runs to several hundred domains and trading names.

Which are the biggest online gambling companies in the UK?

I do not name operators, and the reason is structural rather than coy: brand lists age badly and licensing states change. What can be said is that the licensed market's total gross gambling yield was £17.5 billion in the year to March 2026, remote casino, betting and bingo took £8.3 billion of it, and the Commission's operator dataset covers about 70 per cent of the online market — so concentration is high by design.

Do I pay tax on online gambling winnings in the UK?

No. UK gambling winnings are not subject to income tax, and gamblers' stakes are not subject to VAT; the money is collected upstream instead. The statutory levy, in force since 6 April 2025, charges all online operators 1.1 per cent of the previous year's gross gambling yield, and raised just under £120 million in its first year, ringfenced for research, prevention and treatment.

What if an offshore site refuses to pay out?

Then your options are thin, and the cost of that thinness is the whole argument of this page. The Commission is a regulator and not an ombudsman: it cannot resolve an individual complaint or recover money. A Kahnawà:ke Dispute Resolution Officer or an Anjouan-approved ADR provider may eventually hear the case, but an unlicensed site's terms are enforced by no British court's licence condition.

Can an offshore site get round a GamStop exclusion?

An unlicensed site is not connected to GamStop, so it cannot check registrations — but that is not an escape. The exclusion holds for its full term and then stays in place until the person contacts GamStop to remove it, and the Commission's January 2025 warning notice identified unlicensed sites targeting self-excluded customers as a specific enforcement concern.

The Bill Behind the Banner

Online gambling in the UK is well regulated, expensively taxed, genuinely policed on the supply side, and still inconvenient at the moment money has to move, because the cost of a licence is not what an operator pays for it — it is what a player cannot see: the delay, the document request, the ten-times cap that exists on one side of the line and not the other. The comparison that matters is not the banner but the jurisdiction behind it.

Where that leaves anyone who needs it: the National Gambling Helpline, run by GamCare, is free on 0808 8020 133, 24 hours a day, every day of the year — and for callers in Wales there is a separate number, 0808 2819 265. The help exists. The larger UK number is the one thing on this page that is built to be easy to find.