Gambling Not on GamStop Sites Outside the Safety Net and What Comes Back Out

Gambling not on GamStop means sites with no Great Britain licence, so the scheme cannot block them. They are legal to run under their own offshore regulators but illegal to offer to UK customers. There are no British protections, no GamStop block and no clear route to a complaint, and withdrawals turn on paperwork rather than rules.

The word "GamStop" gets typed "gamestop" often enough that search engines have stopped arguing about it. They are the same scheme. It is the national online self-exclusion register, free to use, and since 31 March 2020 every online operator holding a Gambling Commission licence has had to be part of it as a condition of that licence. That licence condition is the whole hinge of this topic. Because the obligation attaches to the licence, it binds British-licensed operators and nobody else. A site registered in Curaçao, Anjouan or Kahnawà:ke holds no Gambling Commission licence, so it is not in the scheme, and the register that blocks half a million people from British sites simply does not reach it.

I have watched this market for years, and the interesting question is never whether the games load. They do. It is what happens at the other end, when money is asked to come back. The Gambling Commission's extraction from regulated operators is fast by any standard, and what separates the good offshore sites from the bad ones is mostly how far they have drifted from that norm — usually with a clause, a queue and a "pending" label. The detail matters more than the promise.

What "Not on GamStop" Actually Means in Britain

Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and it is immaterial whether the facilities are provided wholly or partly by remote communication, or inside or outside the UK. The Commission states plainly that offering commercial gambling services to consumers in Great Britain without a Commission licence is illegal, including where the operator holds a licence somewhere else. On summary conviction the offence carries up to 51 weeks' imprisonment, a fine at level 5, or both.

That is the operator's problem, not the customer's, and it is worth saying clearly because the distinction is genuinely useful here. The same Act's general gambling offences attach to those who provide the facilities. Adult consumers are not committing an offence under section 33 by signing up to a site that should not be serving them. What they lose is not liberty but leverage: the rulebook behind their balance disappears.

What goes with it is a long list most players have internalised without noticing. Financial vulnerability checks, which became a licensing requirement in August 2024 at £500 net deposits over a rolling 30 days and dropped to £150 on 28 February 2025. The £5 online slots stake limit that went live on 9 April 2025, and the £2 limit for 18 to 24s from 21 May 2025. The credit card ban in force since 14 April 2020. The prompt to set a financial limit before a first deposit, mandatory since 31 October 2025. And the wagering cap of ten times, in force since 19 January 2026, alongside the ban on promotions that mix two or more gambling products. None of it binds a site with no British licence.

Offshore regulators do impose standards. Anjouan requires segregated player funds, certified random number generators, AML controls and age verification. Kahnawà:ke requires player terms to be contractual and free of unfair terms and lets a player set limits including zero. But the enforcement posture is different, the distance is longer, and the dispute goes to an ADR provider from a list of four — EGIS ADR, Axion ADR, iGaming ADR or CADRE B.V. — rather than to IBAS or eCOGRA, who between them have historically handled most British gambling disputes.

The Numbers Behind a Site With No GamStop Licence

Start with the benchmark everyone should know before comparing anything. Gambling Commission data covering June to September 2024 records 44.2 million withdrawals by customers of large online operators: 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours, and 0.1 per cent took up to 48 hours. Earlier Commission data from some of the largest companies showed around 99 per cent of withdrawal requests approved, processed and fulfilled within 24 to 48 hours. That is the standard. It is not a marketing claim; it is the regulator's own extraction.

Against that, the offshore experience is not usually slower in the mechanical sense. Card and bank rails are the same rails. It is slower in the human sense, and the reason is structural. A British-licensed operator cannot ask for documents at the withdrawal stage that a licence condition requires it to have sorted earlier — LCCP licence condition 17.1.1, effective 29 July 2026, bars exactly that, with a carve-out only where another legal obligation genuinely demands the information at that moment. Offshore, the check can arrive whenever it is convenient, and there is no provision to stop it arriving last.

The complaints follow the same fault line. The Commission's Contact Centre receives over 6,000 calls a year, and withdrawal problems have been the number one topic raised by consumers; by July 2024 it was still taking around 2,000 complaints a year about withdrawal delays, still the top subject. Complaints coded "Withdrawals and/or financial transactions" fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025, which is progress. A 2026 blog reported that over a quarter of complaints now concern identity verification, raised when documents are demanded only on attempting to withdraw. In December 2025 the Commission warned that casino games from licensed suppliers were turning up on unlicensed sites, noting that such sites often target people who have self-excluded via GamStop.

Gambling Sites Not on GamStop Withdrawal Methods

Speed is not one thing, so the comparison has to be made by method. The figures below are what the payment layer itself promises, before any operator's own queue is added.

Read the middle column as physics and the right-hand column as policy. Visa Direct's Fast Funds service processes in real time with funds available within 30 minutes of approval, and Faster Payments completes over 90 per cent of transactions in under two seconds. Nothing an offshore site does changes either fact. What it changes is where the money stops on the way. The Skrill and Neteller bank-withdrawal charges are theirs, not the casino's, and 2.80 per cent is a real tax on a £500 balance.

Crypto is the fashionable answer and deserves a colder look. Bitcoin's protocol targets ten minutes between blocks and the classic client treats a transaction as unconfirmed until six blocks deep, which many merchants and exchanges require because they carry the double-spend risk. Within any ten-minute window the chance of a block arriving is about 63 per cent — not certainty, a coin toss with better odds. Litecoin's 2.5 minutes is an average cadence, and only about 55.43 per cent of modelled six-confirmation spans complete inside fifteen minutes. On TRON, a USDT transfer to a fresh wallet consumes roughly 130,000 Energy and burns around 26 TRX with nothing staked. Crypto clears the operator's queue; it substitutes a network's variability for a compliance department's.

Who Regulates the Site, and What That Licence Is Worth

Curaçao

The LOK took effect on 24 December 2024 and made the Curaçao Gaming Authority the direct licensing and supervisory authority, replacing the old master-licence and sub-licence model. The legacy orange certificates of operation ended on 15 October 2025 and should no longer be relied on as proof of a current licence. A historic /JAZ number proves nothing either. Fees are a one-time non-refundable EUR 4,592 application plus EUR 47,450 a year — EUR 24,490 to the National Treasury and EUR 22,960 in supervision. The CGA issues a Certificate of Operation Seal only for an approved player-facing domain, and clicking it must redirect to cert.cga.cw; if the certificate behind it names a different domain, the site is displaying someone else's paperwork.

Anjouan

Internet gaming in Anjouan sits under legislation adopted in 2005, and the Anjouan Gaming Authority names the Anjouan Offshore Financial Authority as the competent regulator. Fees are EUR 17,828 one-time and EUR 17,828 annually, with EUR 500 per extra domain. The authority says its licences carry no territorial restrictions under Anjouan law but that holders must comply with the laws of the jurisdictions where they operate, and it stated on 10 June 2026 that an Anjouan licence is not and never has been a universal authorisation to operate everywhere. An ABC News investigation published 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around EUR 17,000 each a year, and that Comoros financial intelligence officials described a related entity as operating illegally.

Kahnawà:ke

The Kahnawà:ke Gaming Commission was established in 1996 and enacted its interactive gaming regulations on 8 July 1999. Licensed operators must be hosted at Mohawk Internet Technologies in the Mohawk Territory. One entity holds the Interactive Gaming Licence; everyone else operates under a Client Provider Authorization, which from 1 January 2027 costs USD 40,000 to apply for and to renew on a five-year cycle, with the annual CPA fee unchanged at USD 20,000. The Commission runs a Logo Certificate Program, effective 15 January 2010, which generates a "Certificate of Good Standing" when a player clicks the logo. Its rules state that a self-exclusion here is permanent and irrevocable, that a player who breaches one forfeits deposited and won funds to a third-party charity, and that a full-time Dispute Resolution Officer handles disputes.

Malta

The Malta Gaming Authority requires a B2C Gaming Service Licence for a Maltese or EU/EEA entity offering a gaming service from Malta, to a Maltese person, or through a Maltese legal entity. Fees are a one-time non-refundable EUR 5,000 application, a non-refundable fixed annual licence fee of EUR 25,000, and gaming tax of 5 per cent of gaming revenue. Minimum issued and paid-up share capital is EUR 100,000 for Type 1 and Type 2 licences and EUR 40,000 for Type 3 and Type 4. The MGA publishes a list of Unauthorised URLs and declares any reference to a Maltese licence on them false and misleading. For players in Great Britain, an MGA licence is still not a Commission licence, and it does not put a site into GamStop.

Costa Rica

Costa Rica operates no comprehensive gambling licensing regime and has no formal framework for issuing gambling licences; the "data processing license" sometimes quoted in the trade is not a licence in the strict legal sense. Its Legislative Assembly rejected Bill No. 25,057 in early 2026, which would have introduced mandatory licensing. Under Costa Rican law, games where the outcome depends primarily on luck are generally prohibited. A "licensed in Costa Rica" line on a site is therefore not a claim to check, it is a claim to discount.

The Check That Decides How Fast Money Comes Back

If one mechanism decides whether an offshore withdrawal is quick or grim, it is identity verification — the know-your-customer process that runs once at sign-up and then again, on some sites, at exactly the moment there is something to gain by delaying.

In Britain the sequence is prescribed. Licence Condition 17 has required, since 7 May 2019, that a licensee obtain and verify information establishing a customer's identity before permitting them to gamble, covering at least name, address and date of birth, and it applies to all remote licences except a short list including low-frequency subscription lotteries, software, host and ancillary licences. Operators should tell customers before a deposit what documents may be needed, in what circumstances and in what form. On top of that sits the anti-money-laundering threshold: in a remote casino, identification and verification are required when a customer deposits to take part in remote gambling, or withdraws such funds or winnings, amounting to €2,000 or more — counting single transactions and transactions that appear linked, such as activity within one logged-on session. A remote casino can identify and verify age at registration and defer full verification to that €2,000 trigger, which the Commission calls the hybrid approach.

The first time is usually the easy one. Companies can verify identity by matching an account against databases such as credit reference agencies and the electoral roll, and then no documents are needed at all; the Commission says it cannot give a timescale because the process varies, and that electronic verification may be instant while documents take longer. Documents a business may ask for include passports, driving licences and household bills. A selfie may be requested where fraud is suspected, such as identity theft. Bank statements may be sought to check source of funds, and for higher-risk accounts, source of wealth.

The warning signs in the later rounds are not subtle once you know the sequence. Documents requested for the first time on a withdrawal, having been unnecessary on every deposit. A threshold that moves without explanation. A request for a selfie after a large win rather than before a large deposit. And the structural tell: in Britain, a withdrawal request must not trigger a demand for information the licensee could reasonably have requested earlier — LCCP 17.1.1 again — while offshore there is no such prohibition and no equivalent duty, so the same demand is simply a term of business. A 2026 Commission blog worried about operators onboarding customers on partial or equivocal verification, and noted the specific harm it can do: registering someone under a middle name instead of a forename can create a mismatch with the GamStop register and undermine the exclusion altogether. Whether a site's identity checks are good or bad, the exclusion does not travel with them.

Online Gambling Sites Not on GamStop Signs of Trust

The licence on the page is the licence on the register

A logo is not a licence. The CGA Certificate of Operation Seal must redirect to cert.cga.cw, and if the certificate behind it names a domain other than the one being visited, it belongs to another operator. Anjouan certificates carry a unique licence number and a QR code linking to a public register, and the authority says certificates that cannot be verified there should not be relied on. Kahnawà:ke's Logo Certificate Program generates a Certificate of Good Standing on the spot. Check that the domain matches. That is the whole test.

The terms say when identification is checked

A trustworthy operator says before the first deposit which documents may be needed, in what circumstances and in what form. That is the LCCP expectation in Britain, and it is a reasonable benchmark anywhere. Search the terms for the words "on withdrawal" near "verify". If identification appears only at the cash-out stage, that is not a compliance regime, it is a hold.

The bonus terms fit inside a sentence

Since 19 January 2026 British licensees have been barred from applying wagering requirements over ten times and from mixing two or more gambling product types in one incentive. Offshore, the published figures run at a high multiple of that, with thirty-five to fifty times a common band for welcome offers and maximum cashout clauses that void the excess — one operator limits bonus-derived withdrawals to 300 per cent of the credited bonus. If the headline cannot be stated in one line, it is not a headline.

Funds are in a separate account and the site says which rating applies

British licensees holding customer funds must keep them in a separate client account or accounts, and must select one of three protection ratings — not protected, medium protection, high protection — state which applies in their terms, and, if unrated, remind customers every six months that their funds are unprotected, giving the value held. Keeping funds separate does not guarantee a return on insolvency, and businesses may hold customer money in overseas accounts. Look for the rating and the words. Absence is an answer.

Someone independent can overturn them

British operators must let a customer refer an unresolved dispute to an ADR entity free of charge if it is not settled within eight weeks, and IBAS reports 100 per cent operator compliance with decisions in the consumer's favour in both 2023-24 and 2024-25. Offshore, Kahnawà:ke employs a full-time Dispute Resolution Officer, and Anjouan requires a named, approved ADR provider in the terms with thirty days expected for a resolution first. No named provider and no deadline is not a neutral omission.

How to Check an Offshore Site Before Depositing

1. Open the regulator's public register and match the domain exactly. Not the logo, the domain in the certificate. This is the only step that establishes the licence exists at all, and it takes about two minutes.
2. Read the withdrawal clause before you read the bonus clause. Maximum limits on how much can be withdrawn, one-withdrawal-at-a-time rules and manual review of every fifth or tenth request have all been found unfair in Britain. Where they exist, they are where the money stops.
3. Check the wagering multiple and the maximum cashout together. A ten-times cap in Britain against a forty-times requirement abroad is the clearest single indicator of which rulebook is running.
4. Confirm whose regulator handles a dispute, and by when. A named ADR provider, a stated deadline and a free process are the three things that make a complaint worth making.
5. Write down the deposit, withdrawal and complaint terms on the day you join. Terms change. A dated screenshot of the version agreed is the only evidence that survives a rewrite.
6. Look up GamStop, your bank's gambling block and blocking software as separate layers. GamStop registration blocks all online companies licensed in Great Britain for six months, one year, five years or five years with auto-renewal; the Commission's list of banks offering a gambling block names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling, applied at card level; and blocking software such as Gamban or BetBlocker installs on the device.

Self-Exclusion Is Not a Setting You Can Switch Back

Registering with GamStop blocks a person from gambling with all online gambling companies licensed in Great Britain, and the term is chosen in advance. Once registered, the registration cannot be cancelled or deactivated during the exclusion period, and the exclusion stays in place after the end of the chosen period unless contact is made to remove it. That second clause is the one people miss. A six-month choice can run for years in practice, and there is a further automatic seven-year retention period during which operators are told the person was previously excluded. Removal is not possible early; the scheme's governing company devoted a section of its 2025 annual report to its refusal to remove registrations before the chosen term ends.

The scheme is not small. GamStop recorded 117,756 new registrations during 2025 and had 561,983 active exclusions at the end of that year. The first half of 2026 brought a 16 per cent year-on-year increase, with May 2026 a record month at 12,236 sign-ups, and by July 2026 the register held 614,738 people, of whom more than one in two had taken the maximum five years. Under-25s were nearly one in three of those new exclusions, up 26 per cent year on year. In 2025, 29 per cent of registrants chose six months, 24 per cent a year, 25 per cent five years and 22 per cent auto-renewal.

An offshore site is never a way round this, and the trade's own evidence says the opposite. The Commission's January 2025 warning notice said unlicensed sites often target customers who have self-excluded via GamStop, and that such sites may have inadequate social responsibility and AML controls. Meanwhile British sites must close the account of anyone who has entered a self-exclusion and return the funds held, and the Commission has said it is not sufficient merely to prevent withdrawal while still accepting wagers. The land-based schemes work differently and are worth knowing: SENSE covers licensed casinos with a minimum six months extendable to twelve, removal only in person with a manager during the six-month Thinking period that follows, and 24-hour cooling-off; GamStop Betting Shops, formerly MOSES, runs by telephone on 0800 294 2060 for a fixed twelve months that cannot be ended early.

The help is free and does not need a licence. The National Gambling Helpline, run by GamCare, is 0808 8020 133, 24 hours a day, every day of the year; in Wales the number given is 0808 2819 265. GamFam supports families through its GRA5P programme, Gamblers Anonymous England, Wales and Ulster is on 0330 094 0322, and NHS England has opened 15 specialist gambling clinics since 2019.

Where the Money Actually Stops

The pattern in the enforcement data is worth holding on to, because it explains why offshore sites are found in the first place and then found again after a rebrand. Registrar blocks and website suspensions produce an average 91 per cent fall in engagement, GEO IP blocking 60 per cent, Bing removal 52 per cent, Google removal 30 per cent and Facebook removal 8 per cent. The Commission's own reading is that GEO IP blocking and registrar blocks beat search-engine removals, because removing a result makes a site harder to find without fully blocking access. In the quarter July to September 2026 the Commission referred 1,835 websites — 7,677,211 URLs — and issued 546 cease and desist notices, against 226 website referrals and 98 notices in January to March 2026. Over April 2025 to March 2026, every quarter recorded 0 or 1 prosecutions commenced.

Small territory, large fees. A Curaçao B2C licence costs EUR 47,450 a year; Anjouan charges EUR 17,828 a year, and one administrator there claims more than 1,300 licences issued at roughly EUR 17,000 each. That arithmetic is the reason the register of unlicensed sites keeps refilling no matter how many are disrupted, and it is the most useful thing a careful player can know when a site's licence looks impressive and its withdrawal page does not.

Frequently Asked Questions

What gambling sites are not on GamStop?

Any site operating without a Gambling Commission licence. GamStop membership is a condition of a British licence, under LCCP social responsibility code provision 3.5.5, so operators licensed only in Curaçao, Anjouan, Kahnawà:ke, Malta or elsewhere are outside the scheme and it cannot block them. Costa Rica issues no gambling licences at all, so a site claiming one is really claiming nothing.

Is using gambling sites not on GamStop UK players can reach legal?

The offence sits with the provider. Section 33 of the Gambling Act 2005 makes it an offence to provide gambling facilities without a licence, and the Commission says it is illegal to offer commercial gambling services to consumers in Great Britain without a Commission licence, even where a licence exists elsewhere. That covers the operator. What a customer forfeits is protection, not immunity, which is a worse trade.

How do online gambling sites not on GamStop handle withdrawals?

More slowly than the benchmark, mostly for structural reasons. Gambling Commission data covering June to September 2024 found 96.3 per cent of 44.2 million withdrawals from large operators cleared automatically. Offshore, the withdrawal-stage document request is not barred, maximum withdrawal limits are not prohibited, and no licence condition forbids adding friction only when money leaves. Speed depends on the operator's queue, not the payment rail.

Why do gambling apps not on GamStop ask for documents so late?

Because late is where the leverage is. British licence condition 17.1.1, effective 29 July 2026, says a withdrawal request must not create a demand for information the licensee could reasonably have asked for earlier. No offshore regulator imposes that. A 2026 Commission blog found over a quarter of complaints to its Contact Centre concern identity verification, typically raised when documents are requested only at the cash-out stage.

Can a Welsh gambling site not on GamStop offer something different?

No. Wales sits inside the same licensing regime as England and Scotland, and the Gambling Commission's remit covers Great Britain, so any site accepting Welsh customers lawfully holds the same licence. The practical difference is on the help side: Welsh callers are given the National Gambling Helpline number 0808 2819 265 alongside 0808 8020 133, and Citizens Advice Scotland runs its own service on 0800 328 1131.

What does a self-exclusion do if a site is not covered?

Nothing on that site, and everything on the licensed ones. A GamStop exclusion blocks all online companies licensed in Great Britain for six months, one year, five years or five years with auto-renewal, and it cannot be cancelled during the term or ended afterwards without contacting GamStop. Offshore it has no force at all. The Commission warned in January 2025 that unlicensed sites often target people who have self-excluded.

The Short Version

The speed a site advertises is the payment rail's; the speed it delivers is the operator's choice, and that choice is what the licence decides. The National Gambling Helpline is on 0808 8020 133, free, 24 hours a day — and the sharper number is this one: in the quarter July to September 2026 the Commission referred 1,835 websites and 7,677,211 URLs in a single quarter, which is roughly what a market looks like when the only thing standing between a doubtful site and a UK player is a search result.