Online gambling in the UK is legal only at operators holding a Gambling Commission licence; those sites must now let anyone withdraw their deposit balance at any time and cannot use reverse withdrawals to tempt money back. Offshore sites hold no such licence, offer no UK protections, and pay out on their own terms.
Online gambling uk is a search phrase that hides a fork in the road, and the fork has nothing to do with the games. There are operators licensed by the Gambling Commission, bound by the Licence Conditions and Codes of Practice, checked against GamStop every 24 hours, and rated on how their customer funds would fare if the company folded. And there are operators licensed elsewhere — Curaçao, Anjouan, Kahnawà:ke — who will take a British deposit and answer to nobody in Britain. Both groups advertise the same slot games and both groups call themselves casinos. Only one group has a regulator standing behind the withdrawal button. Occasionally the scheme is typed "gamestop"; the scheme itself is GamStop.
The British market is not small and not shrinking. Total Great Britain gross gambling yield reached £17.5 billion in the year to March 2026, a 4.4 per cent rise, with remote casino, betting and bingo contributing £8.3 billion of it. An estimated 2.5 per cent of people who gambled online in the previous four weeks had engaged with an illegal gambling website, according to the Commission's analysis published on 5 November 2026. That is a small share and a serious one. The £16.6 billion that H2 Gambling Capital reckons was staked with illegal operators in 2025 is not money that disappears into a void; it is money sitting in accounts with no GamStop link, no ADR provider on the approved list, and no obligation to explain a delay. What follows is about the terms attached to getting it back.
Table of Contents12
- ## The Line between Licensed and Merely Available
- How Many Online Gambling Sites Are There in the UK?
- Standards for Licensed Operators
- Withdrawal Timelines and Methods
- Verification Standards
- Offline Factors That Cause Delay
- Signs of a Trustworthy Operator
- Practical Routine Before Playing
- Bonus Terms and Delay Factors
- How Many People Gamble Online in the UK?
- Common Questions About the Market
- Payouts as a Product Metric
## The Line between Licensed and Merely Available
The plain position first, before any of the detail. A site that holds no Gambling Commission licence is not licensed in Great Britain, whatever certificate it displays. Section 33 of the Gambling Act 2005 makes it an offence to provide gambling facilities without an operating licence, and it applies to remote gambling if even one piece of remote gambling equipment is situated in Great Britain — or, since 2014, if the operator knows or should know the facilities are likely to be used in Britain. The Commission's own words, published 21 October 2024, are that it is illegal to offer commercial gambling services to British consumers without a Commission licence, including where the operator holds a licence in another jurisdiction.
For the player rather than the operator, the consequences are practical. A British licence carries GamStop integration, the credit card ban, the £5 slot stake cap for adults and £2 for under-25s, ADR access free of charge, and a customer-funds rating that must be stated in writing before the first deposit. An offshore licence carries its own rulebook, enforced from a distance, in a jurisdiction whose dispute process a British player would have to find, join and pay attention to.
The regulators are not idle. Since April 2024 the Commission's Illegal Markets team has issued 3,140 cease and desist and disruption notices, referred 447,778 Google and Bing URLs and secured 287,961 removals. Across 160 illegal websites with traffic data, engagement fell by an average of 32 per cent after disruption — 91 per cent where a registrar block landed. Search engines are the soft target: Google removal cut engagement by just 30 per cent, while the site kept trading.
Two things are worth holding in mind together. The British rules are strict, and they shape what a licensed site may put in your way. The offshore rules are loose, and they shape what an offshore site may keep.
How Many Online Gambling Sites Are There in the UK?
Nobody knows, and anyone who says otherwise is guessing. The Gambling Commission does not publish a count of licensed domain names. What it does publish is 586 illegal gambling websites accessible to British consumers identified in September 2026, 4 per cent more than a year earlier, and 311 illegal sites disrupted in the second quarter of 2026 to 2027, 38 per cent more than the previous quarter. A third-party tracker reading Curaçao's public register found 704 licences held by 698 operators, of which 552 were active, in early November 2026 — a figure from a register watcher, not the regulator.
The honest answer to how many sites exist is that the number matters less than the two facts behind it. First, licensed operators are countable and checkable: the Commission's public register lists them by trading name and domain, and a mismatch between the name on the licence and the name on the website is itself information. Second, the offshore count is a moving target that enforcement, registrar blocks and payment referrals keep churning. Between April 2025 and April 2026, across respondents who had gambled online in the previous four weeks, 2.5 per cent had engaged with an illegal site and a further 1.5 per cent in the previous year. Few, in other words, but not nobody — and the Commission's own methodology admits it does not capture activity hidden behind a VPN.
Standards for Licensed Operators
The phrase begs for a league table, so here is one that does not name a single brand. "Best" in a market where every operator offers roughly the same games reduces to the terms attached to your money — and those terms divide cleanly by licence. The table below compares categories, not companies.
| Criterion | Gambling Commission licence | Offshore licence (Curaçao, Anjouan, Kahnawà:ke) |
|---|---|---|
| Withdrawal delay allowed by the rules | No valid reason to delay where there are no regulatory concerns | Set by the operator's own terms |
| Reverse withdrawals (cancelling a payout) | Banned since 31 October 2021 under RTS 14B | Often permitted; check the terms |
| Deposit balance | Remains the customer's; must be withdrawable at any time, bonus pending or not | Terms may make bonus and deposit balances inseparable |
| Maximum withdrawal limit | Prohibited; the Commission's example of a banned term is "£50 per day" | Max cashout clauses are routine |
| Identity checks | Must be requested before deposit where possible; a withdrawal request cannot be the first time | At the operator's discretion, often at withdrawal |
| Self-exclusion | GamStop integration mandatory since 31 March 2020 | Not connected to GamStop |
| Dispute route | Free ADR with a Commission-approved provider | The operator's designated ADR, if any |
| Funds if the operator fails | One of three published insolvency ratings, disclosed before first deposit | No British disclosure requirement |
Read the second row twice. The Commission banned reverse withdrawals outright with RTS requirement 14B, in force from 31 October 2021, precisely because the function tempted engaged players to put a requested payout back into play. Any site still offering a countdown before your money leaves is telling you which rulebook it follows.
Withdrawal Timelines and Methods
This is where the market's promises meet arithmetic. The Commission's data for June to September 2024, cited in a speech delivered on 6 November 2025, covers 44.2 million withdrawals by customers of large online operators: 96.3 per cent cleared automatically, 3.5 per cent within 24 hours, and 0.1 per cent took up to 48 hours. That is the licensed baseline. Once an operator has pushed the money out, the payment rail takes over, and the rail is slower than most players assume.
| Method | Where the delay sits | Concrete numbers |
|---|---|---|
| Faster Payments | Bank to bank, near-instant | Scheme ceiling £1 million per transaction; over 90 per cent complete in under 2 seconds; individual banks set lower limits |
| CHAPS | Same working day, cut-off applies | No scheme upper limit |
| Visa Direct / card payout | Real time once approved | Funds available within 30 minutes of approval |
| PayPal | Instant in-account | No fee to a UK bank account without currency conversion; £0.50 bank return fee if details are wrong |
| Skrill | Instant to the wallet | 2.80% to a bank account, minimum EUR 3.50, from 12 January 2026 |
| Neteller | Instant to the wallet | 2.80% to a bank account, minimum USD 3.50 |
| Bitcoin | Confirmation race | 10-minute average block; a block within any 10-minute window arrives with about 63% probability, 95% within 30 minutes |
| Litecoin | Faster blocks | 2.5-minute average first confirmation; a 6-confirmation span completes inside 15 minutes only about 55.43% of the time |
The pattern in the table is the point. The method decides whether a payout lands in seconds or in an hour, and it also decides who pays for the transfer: an e-wallet charging 2.80 per cent on a £1,000 withdrawal takes £28, which no operator's marketing will mention. A card payout is quick but rides on the operator's approval. A bitcoin payout is only as fast as the next block, and one block is not a settlement. Anyone weighing how to gamble online uk sites compare fees on has found the real differentiator: not the bonus, the exit.
Two rules govern the front of that clock. Licence condition 17.1.1 says a withdrawal request must not trigger a demand for information the operator could reasonably have asked for earlier — though a genuine anti-money-laundering obligation survives that prohibition. And there is no fixed maximum number of days in the LCCP. The regime relies on condition 7.1.1, the fairness requirement, instead of a stated deadline. The absence of a deadline is not an oversight; it is the reason the Commission keeps telling operators that unexplained friction at withdrawal is unacceptable.
Verification Standards
If one thing explains why a British payout stalls while an offshore payout sails through, it is identity verification — and the difference is not rigour, it is timing. The checks are required in Britain. The question is only when they happen.
For a licensed remote casino, the framework is licence condition 17, introduced on 7 May 2019, which requires information establishing identity to be obtained and verified before the customer is permitted to gamble. The information must include name, address and date of birth. There is a legitimate alternative: anti-money-laundering rules threshold customer due diligence for a remote casino at deposits or withdrawals totalling €2,000 or more, and the Commission's "hybrid approach" allows a remote casino to identify the customer and verify age at registration and defer full verification to that threshold. The direction of travel is the other way. The Commission said in a blog published on 12 August 2026 that it expects identity and age checks brought forward to before a customer deposits or stakes, and that onboarding on incomplete or inaccurate details — initials instead of a full name, a commercial address instead of a residential one — is not good enough.
Now the sting. A mismatch created by a middle name where a forename belongs can break a GamStop match, which is how a self-excluded person slips through a check that was nominally performed. And self-exclusion itself is not a mood that passes: once registered with GamStop, it holds for the full chosen term — six months, one year, five years, or five years with auto-renewal — and it stays in place after that term ends until the person contacts GamStop to remove it. In 2025, 29 per cent of registrants chose six months, 24 per cent a year, 25 per cent five years and 22 per cent auto-renewal. The scheme is free, and it cannot be undone early.
Where the checks go wrong, the warning signs are specific. Documents demanded for the first time at the withdrawal button. A verification process described as "under review" with no named document outstanding. A withdrawal held while the account continues to accept deposits. Requirements attached to a withdrawal that a licensed operator would be hard-pushed to justify under condition 17.1.1. And a request for a redacted bank statement when the Commission has stated it has no policy expectations about redacted documents — the operator is improvising.
The scale of the friction is measurable. Over a quarter of complaints reaching the Commission's Contact Centre concern identity verification, according to the same 12 August 2026 blog, and complaints coded "withdrawals and/or financial transactions" ran at 1,791 in the year to December 2025. The Commission also warned, in a notice dated 20 January 2025, that casino games supplied by licensed operators were appearing on unlicensed websites that often target people who have self-excluded through GamStop — which is worth saying plainly rather than tactfully. An offshore site is never a route around an exclusion. It is a place where an exclusion was never registered in the first place.
Offline Factors That Cause Delay
Not every slow payout is a broken rule. Some have been written into the terms on purpose, and the licensed market has specifically closed most of these doors.
Reverse withdrawals. Banned in Britain under RTS 14B since 31 October 2021. Offshore, the cancellation window is a standard feature, and it is the single most effective delay device ever invented, because it invites the player to do the delaying.
Maximum cashout clauses. A licensed operator cannot impose a maximum limit on what may be withdrawn from a deposit balance; the Commission's own example of a prohibited term is "you may withdraw up to £50 per day and up to £500 per week". Offshore terms cap bonus-derived winnings at a multiple of the bonus credited, with the excess voided.
Wagering requirements. In Britain, from 19 January 2026, wagering requirements on bonus funds are capped at ten times, and mixed-product promotions requiring two or more gambling products are banned. Offshore multipliers of 25× to 40× are the trade norm, and the cap is not theirs to respect.
Pending periods and manual review. Some British-facing operators have been penalised for exactly this. On 21 October 2026 the Commission announced a £900,000 regulatory settlement with one licensee, which runs seven websites, over failures including unnecessarily delaying consumer withdrawals — among them a term limiting customers to one withdrawal at a time and manual review of every fifth or tenth withdrawal that led to extra information being required.
Minimum withdrawal thresholds. Not a legal issue if disclosed, but a practical one: a £20 minimum on a £15 balance means the money sits there, and sits there as deposit balance, which is the player's and should be payable on request.
Bank blocks are a separate layer, and a useful one. The Commission's list, last updated 16 October 2026, names eleven banks offering a gambling block — Bank of Scotland, Barclays, Halifax, HSBC, Lloyds, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling. They work by declining payments on gambling merchant category codes, apply at card level, and most carry a 48- or 72-hour cooling-off period before gambling transactions resume. They do not affect your credit score. They also will not stop an offshore transfer disguised as something else, which is the limit of what a category code can do.
Signs of a Trustworthy Operator
Trust is not a feeling about a website's design. It is a list of checks that either pass or fail, and each one takes minutes.
The licence matches the domain
The Commission advises checking the public register and clicking through to confirm the site's activities and domain names match the licence. If the brand name on the page appears nowhere on the register, stop there. Offshore, Curaçao's Certificate of Operation seal must redirect to a named verification address and must show the same domain you are on — a seal showing someone else's domain means the certificate belongs to another operator. Anjouan's certificates carry a licence number and a QR code linking to a public register, and the authority's own position is that certificates which cannot be verified there should not be relied on.
The licence is current, not historic
Old Curaçao numbers are a trap. Legacy "orange" sub-licence certificates of operation ended on 15 October 2025, and the Curaçao Gaming Authority states that a historical /JAZ number or legacy seal must not be treated as proof of a current licence. The four former master licensors stopped issuing on dates between 18 August 2024 and 31 January 2025. A certificate that looks official and dates from a superseded regime proves the operator was licensed once, under a system that no longer exists.
The terms say when your money comes out
A trustworthy operator states its withdrawal terms in plain language: what is instant, what takes a day, what the wallet charges, and whether any bonus-derived winnings are capped. If the payout terms are only findable behind a second link inside a promotional page, that is the answer. The fair-and-open condition 7.1.1 requires terms that are not unfair within the meaning of the Consumer Rights Act 2015, and the CMA's do's and don'ts — applied by the Commission to all operators — say firms must not deny customers access to their own money or place maximum limits on withdrawals.
Customer funds are rated and disclosed
Before the first deposit, a licensed operator must disclose in writing whether customer funds are protected in the event of insolvency, at one of three ratings: not protected, medium protection or high protection. Funds must sit in a separate client account from the operator's own money. It is worth knowing what that does not mean: a separate account does not guarantee a return of funds if the operator fails, and operators are legally allowed to hold customer money in overseas bank accounts. An operator that never mentions the rating has skipped a required step.
There is a named dispute route that costs nothing
A licensed operator must offer access to a Commission-approved ADR provider free of charge where a complaint is unresolved after eight weeks. The approved list includes IBAS, eCOGRA, CEDR and others, and IBAS reports 100 per cent operator compliance with decisions in the consumer's favour in both 2023-24 and 2024-25. eCOGRA's report for 1 October 2024 to 30 September 2025 records 911 disputes, 150 of them valid "deposits and withdrawals" cases, with an average resolution time of 31 days — and 72.3 per cent of invalid disputes had skipped the operator's own complaints process. Offshore, Kahnawà:ke licencees must allow a player to set limits including zero and employ a full-time Dispute Resolution Officer; Anjouan requires a designated ADR provider named in player-facing terms. If no provider is named, assume there is not one. And note the Commission's own limit: it is a regulator, not an ombudsman, so it cannot get your money back.
Practical Routine Before Playing
Six steps, each with its reason. None of them requires any special knowledge, and all of them are lawful and ordinary.
- Check the licence on the Commission's public register, then check the domain. The register lists licence holders by trading name and domain. A brand whose name or web address does not appear there is either unlicensed or operating under a name it has not declared — and the Commission explicitly advises consumers to make this check.
- Read the withdrawal section of the terms before reading the bonus section. The bonus page is marketing and the withdrawal page is the contract. Look for the pending period, the minimum withdrawal, the processing fee, any maximum cashout clause, and whether a withdrawal can be reversed. If it can be reversed, you are dealing with an offshore rulebook even if the site looks British.
- Decide before depositing how the money will come back. Deposit through the same method you intend to withdraw to, because e-wallets charge for bank transfers — Skrill and Neteller both at 2.80 per cent, minimum EUR 3.50 and USD 3.50 respectively from 12 January 2026 — and a card that pays in instantly may not pay out instantly if the operator approves payouts in batches.
- Set the financial limit the site is now required to offer. Since 31 October 2025 all gambling businesses must prompt customers to set a financial limit before the first deposit, present it as the default option under RTS 12E, and offer it via a free-text box. A deposit limit set at account level is also a withdrawal-friction antidote: it removes the temptation to fund a big session while a payout is pending.
- Complete verification before you want it, not when you need it. Request the document list at sign-up, or look at what the operator told you before your deposit about which documents may be needed and when. Electronic verification through credit reference agencies or the electoral roll often needs no documents at all; a passport or driving licence photo in advance avoids the familiar stretch where a payout waits on a scan.
- Know where to get help before you need it, and know that a self-exclusion holds. GamStop registration is free, can be set for six months to five years, and cannot be cancelled during the term you chose — nor does it lapse when the term ends; it stays until the person contacts GamStop to remove it. Around 614,738 consumers were on the register as of July 2026, of whom more than one in two had chosen the maximum five years. Blocking software such as Gamban or BetBlocker adds a layer, and a bank block adds another at card level. The National Gambling Helpline, run by GamCare, is free on 0808 8020 133, 24 hours a day, every day of the year; in Wales the number given is 0808 2819 265. NHS specialist gambling clinics operate across England, GamFam supports families and friends, and Citizens Advice Scotland runs a gambling support line on 0800 328 1131, Monday to Friday, 10am to 3pm.
Bonus Terms and Delay Factors
A £10 free bet is not a gift; it is a short contract with a long annexe, and the annexe is where the delay lives. Two rules in force since 19 January 2026 changed the British annexe substantially. Wagering requirements on bonus funds are capped at ten times, which the Commission said removes the sort of extreme terms that had reached 60 times. And mixed-product promotions requiring two or more types of gambling are banned: "bet £5, get £10 free bet" is compliant, while "bet £5, get 20 free spins" is not, because it mixes product types between the activity and the prize. Where the award is mixed in itself — a free bet and free spins together — that fails too. Where the customer freely chooses which product category to use bonus money on, it passes.
What did not change is the incentive to make cashing out awkward. Offshore terms typically run to a wagering multiple, a maximum bet while wagering, a maximum cashout, and a bonus-abuse clause under which winnings can be confiscated. One operator's published rule caps bets at 20 per cent of the deposited amount and warns that breach may bring account closure and forfeiture. Another voids anything above a multiple of the bonus credited and restricts specific bets — low-margin, equal or zero-risk wagers, and moving from a low-weighted game to a high-weighted one after a big win. In Britain, terms setting out promotional restrictions must specify the prohibited patterns of play rather than reserve sole discretion for the operator, and clauses on fraud, collusion and multiple accounts must sit in separate terms from promotional play restrictions. A single clause giving the operator discretion to close accounts or forfeit winnings is the sort of thing that attracts a penalty: a £170,000 fine in July 2025 included exactly such a term.
The complaint route has limits worth knowing before you need it. ADR providers will not accept complaints about customer service, or about a refusal to accept a bet. The Commission cannot order a payout. That is why the terms matter more than the escalation path.
How Many People Gamble Online in the UK?
More than the stereotype and fewer than the advertising suggests. The Gambling Commission's third annual Gambling Survey for Great Britain, published 16 July 2026 and based on 20,775 adults with fieldwork from January 2025 to January 2026, found that 47 per cent of adults had gambled in some form in the previous four weeks — falling to 27 per cent once lottery-only participation is excluded. Problem Gambling Severity Index scores of 8 or more stood at 2.4 per cent, stable across the survey's three years at 2.5, 2.7 and 2.4 per cent. Of those who had gambled in the previous 12 months, 3.4 per cent had sought support for their own gambling.
The online market is heavily concentrated: average monthly active online accounts ran at 13.4 million in January to March 2026, and the dataset behind that figure covers only about 70 per cent of the online market. Self-exclusion figures give the sharpest picture of who is asking for the brakes. GamStop recorded 117,756 new registrations in 2025 and 561,983 active exclusions at the end of that year; by July 2026 the register stood at 614,738 people. Registrations rose 16 per cent year-on-year in the first half of 2026, with May 2026 setting a monthly record of 12,236 sign-ups. Under-25s accounted for nearly one in three of those first-half self-exclusions, a 26 per cent year-on-year jump — while across all age groups only one in four had opted for the six-month term, and more than one in two on the register as of July 2026 had chosen the maximum five years. People choosing half a decade, not half a year. That is not the profile of a market where a delay at the withdrawal button is the main worry.
Common Questions About the Market
Is online gambling legal in the UK?
Yes, if the operator holds a Gambling Commission licence. It is illegal under section 33 of the Gambling Act 2005 to provide gambling facilities without one, and the prohibition applies to remote gambling where equipment is situated in Great Britain or the operator knows the facilities are likely to be used there. Operating under a foreign licence does not make it lawful, and the Commission has said so publicly. Offshore sites remain reachable; lawful is a separate question.
Do I pay tax on uk online gambling winnings?
No — British gambling winnings are not subject to income tax, and the duty sits with the operator rather than the player. Since 6 April 2025 operators have paid a statutory levy ranging from 0.1 to 1.1 per cent of gross gambling yield, with online operators paying 1.1 per cent. In its first year the levy raised just under £120 million, ringfenced for research, prevention and treatment — split 20 per cent research, 30 per cent prevention and 50 per cent treatment.
What is the daily withdrawal limit at uk online gambling sites?
Under the Commission's fair-terms guidance there should not be one on the amount you take out of your deposit balance, and the Commission names a "£50 per day, £500 per week" clause as an example of a prohibited term. Operators may reasonably limit the number or size of separate withdrawals, and may charge a cost-reflective processing fee, provided that is clear before you deposit. Maximum cashout clauses belong to the offshore rulebook.
Can I use a credit card to gamble online in the UK?
No. The Commission banned credit cards for gambling from 14 April 2020 through licence condition 6.1.2, and operators must also check that money paid in from an e-wallet was not loaded from a credit card. The ban covers online betting, casino and bingo and lotteries accepting online or telephone payment. It does not extend to buying a lottery ticket or scratchcard in a shop or by post, where a credit card is still permitted.
Is online gambling legal in the uk on an offshore site?
A site licensed elsewhere is not licensed in Great Britain, and the Commission's remit covers only sites that trade or advertise to British customers under its licence. In practice that means no GamStop match, no credit card ban, no £5 slot stake cap, no published customer-funds rating and no Commission-approved ADR route. Withdrawals depend on the operator's own terms — and a self-exclusion registered with GamStop has no effect there.
How do I claim an online gambling refund in the UK?
Complain to the operator first; a licensed operator must allow complaints for at least six months from the incident and complete its internal process within eight weeks. If it deadlocks, ADR is free and approved providers include IBAS and eCOGRA. ADR will not hear customer-service complaints or a refusal to take your custom, and eCOGRA may reject a dispute on a site outside its list. The Commission records complaints but cannot recover money.
Payouts as a Product Metric
Strip away the welcome offers, the loyalty schemes and the design, and an online casino is a promise to return money on request — which is why the useful division in this market is not between games or brands but between operators who must pay on terms a British regulator has tested and operators who pay on terms they wrote themselves. The licensed side is imperfect and occasionally penalised for it. The offshore side is beyond reach, and the Commission's estimate that 2.5 per cent of recent online gamblers had used an illegal site in the previous four weeks puts a number on how many people discover that too late.
The number I keep returning to is not a bonus figure. It is that 96.3 per cent of 44.2 million withdrawals by large UK operators cleared automatically — and that an estimated £16.6 billion was staked with illegal operators in 2025 anyway. Help is free, on 0808 8020 133, at any hour of any day.