Gambling Not on GamStop and What Still Guards a Balance

Sites that are not on GamStop hold no Great Britain licence, and the self-exclusion scheme only binds operators the Gambling Commission licenses. So the deposit you send, the winnings you win and the cash the site still holds for you sit outside the protections British law builds around a balance.

Offshore rooms advertise withdrawals in minutes, and the phrase does a lot of work. The reason some of them can be quick is not better technology; it is that nobody obliged them to run the checks a British licence demands. Speed and protection are built from the same raw material — the operator's willingness to look hard at who is depositing — and a site can only move fast by spending less of it.

That is the whole tension of this market, and it is worth stating plainly at the start. This is not a page about finding a comfortable loophole. It is a page about arithmetic: what a British licence buys, what an offshore one leaves out, and how to tell the difference before money moves rather than after.

I have read a great many terms and conditions for this beat, and the pattern is consistent. The best offshore operators publish real numbers about their licensing, their payment rails and their dispute route, and honour them. The worst publish a seal image and a promise. The gap between those two things is where players lose money, and it is measurable, so let us measure it.

What "Not on GamStop" Actually Means

Gambling sites not on GamStop are, in legal terms, unlicensed in Great Britain. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and that offence attaches to the operator, not to the adult who plays. On summary conviction it carries up to 51 weeks' imprisonment, a fine not exceeding level 5 on the standard scale, or both. The Gambling Commission has stated since 21 October 2024 that it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where the operator holds a licence in another jurisdiction.

The word is often typed "gamestop", because the word "game" suggests itself. The scheme is GamStop, and the distinction matters less than what it does.

Since 31 March 2020, participation in GamStop has been a licence condition for every online operator in Great Britain, sitting in the LCCP at social responsibility code provision 3.5.5: "Licensees must participate in the national multi-operator self-exclusion scheme." Since April 2020 operators have had to check their entire customer base against the register at least every 24 hours. An offshore site has no such duty. The trade and press position that offshore sites are unconnected to GamStop is consistent with the scheme's own terms of use, though it is stated by secondary sources rather than a regulator page.

Self-exclusion is not a thing that lapses politely. Registering blocks a person from every online operator licensed in Great Britain for six months, one year, five years, or five years with auto-renewal; the block can take up to 24 hours to bite; and once registered it cannot be cancelled or deactivated during the term. At the end of the chosen period the exclusion stays in place unless the person contacts GamStop to remove it. The scheme's 2025 annual report confirms that registrations cannot be removed before the term ends. On the commission's register as of July 2026 there were 614,738 people recorded, and across all age groups only one in four had chosen the six-month option. A site that is not on GamStop is not a way round any of that.

Where Help Is, and Where the Licence Stops

Two sentences that belong near the top of any page like this one. First: offshore sites are not licensed in Great Britain, and the protections that attach to a British licence — fair-terms conditions, identity-verification rules, the dispute route to an approved ADR provider, the levy-funded treatment system — do not apply to them. Second: the National Gambling Helpline, run by GamCare, is free on 0808 8020 133, 24 hours a day, every day of the year, and the same number reaches live chat and WhatsApp. In Wales the number given alongside it is 0808 2819 265. Citizens Advice Scotland runs a gambling support advice line on 0800 328 1131, Monday to Friday, 10am to 3pm, for debt and housing problems that come attached. A licensed site must be reachable through dispute resolution that costs the player nothing; an unlicensed one is not obliged to be reachable at all.

The Benchmark of 44.2 Million Withdrawals

The single checkable figure I would put against every "instant payout" claim comes from the Commission itself, and it is about British-licensed operators, which is the standard against which everything else has to be judged. Commission data covering June to September 2024 records 44.2 million withdrawals by customers of large online operators in that period. Of those, 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours, and 0.1 per cent took up to 48 hours — data cited in a speech delivered 6 November 2025.

Read that again: on the licensed side, almost everything is automatic. A UK-licensed operator is not slow because of technology it lacks. Where it is slow, it is choosing to be, and the Commission has said so in terms. It states it is not acceptable for operators to introduce friction when a customer tries to withdraw rather than when they deposit, or to place commercial interests above the customer's; where it has no regulatory concern about a customer, there is no valid reason to delay the payout. Withdrawals were the number one subject of consumer complaints to its contact centre, running at around 2,000 a year by July 2024, and complaints coded "Withdrawals and/or financial transactions" fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025. The licensed standard is imperfect and still improving. It is the only benchmark with real numbers behind it.

How Offshore Withdrawals Are Built to Take Time

Online gambling sites not on GamStop set their own payout architecture, and the delays are usually written into the paperwork rather than the plumbing. There are four common constructions, and each one has a counter-move.

Manual review on a schedule. A site that reviews every fifth or tenth withdrawal request is not random; it is a queue with a rule. The Commission fined L & L Europe £900,000 in a regulatory settlement on 21 October 2026 for failures including unnecessarily delaying consumer withdrawals — a term limiting customers to one pending withdrawal at a time, and manual review of every fifth or tenth request that generated fresh document demands. That case was a licensed operator, which tells you what the unlicensed ones can build without anyone objecting.

A first-deposit deadline that never got met. A British licence has required identity verification before a customer gambles since Licence Condition 17 came in on 7 May 2019. Offshore there is often no such moment, so verification is postponed until the withdrawal request — which is precisely when the operator has the money and the player has no leverage. Over a quarter of the complaints reaching the Commission's contact centre concern identity verification, the concern customers raise when documents are demanded only at withdrawal.

A term that lets the operator decide. A bonus term giving the site sole discretion to close an account or forfeit winnings is the tell. An operator was fined £170,000 in July 2025 partly for exactly that wording. Offshore, those clauses are normal, and the operator's own judgment is the only appeal.

A maximum cashout clause. Where a British operator may not impose any maximum limit on the amount a consumer may withdraw from their deposit balance, an offshore one can cap winnings from bonus funds at a multiple of the bonus. One published set of terms limits such winnings to 300 per cent of the credited bonus amount, with the excess voided. That is not a payout speed problem. It is a payout size problem, and a larger one.

Comparing the Rails, by Method

The table below compares payment methods on the criteria that decide how money actually behaves, on the licensed standard of comparison. Method fees and timings quoted are the providers' own published terms.

The pattern inside the table is the same pattern as the rest of this page. Bank rails are fast, cheap and reversible-by-rule; casino wallets are fast, priced in percentages, and governed by whatever the operator's terms say about a dormant or a disputed balance. Crypto rails are genuinely quick to confirm and genuinely final, which is a different thing from safe: a six-confirmation Bitcoin default assumes an attacker with under 10% of network hashrate and accepts a residual double-spend risk under 0.1%. On a $5,000 withdrawal, that residual is a real number.

What Still Protects a Balance, and What Does Not

This is the question the whole subject turns on, and offshore the answer is that player-funds protection depends almost entirely on the licence that is not there. On the British side the machinery is explicit. Customer funds must be held in a separate client bank account under LCCP licence condition 4.1.1, and operators must select one of three protection ratings — "not protected", "medium protection" or "high protection" — declare which applies in their terms, and, if they are rated "not protected", remind the customer every six months that their funds are not protected in the event of insolvency, stating the value held. Money staked inside an open bet is not customer funds at all and is not protected by any arrangement the business has.

Even that is weaker than it sounds. Keeping customer funds in a separate client account does not mean customers get their money back if the operator becomes insolvent, and British-licensed businesses are legally allowed to hold customer money in overseas bank accounts. What the licence buys is disclosure and a rating, not a guarantee.

Offshore, the position is a lottery of paper. On the record: Curaçao's regulator under the LOK framework requires segregation of player funds from operational funds; Anjouan's published standards require the same, plus certified random number generators, AML controls and age verification; Kahnawake requires a licensee's relationship with players to be contractual and free of unfair or unreasonable terms, and states that its own voluntary self-exclusion is permanent and irrevocable. Those are real standards on paper. The problem is the distance between paper and practice. The Curaçao regulator's own register has been through a rebuild — the legacy "orange" sub-licence certificates ended on 15 October 2025, and the regulator announced on 7 October 2026 that its old online portal would not return to service and that it is building a new way to verify licensed domains. A seal that cannot be verified is a picture, not a licence. Curaçao's B2C framework costs an operator EUR 47,450 a year in total; Anjouan's licence is EUR 17,828 a year. Neither price includes a promise that a balance survives an insolvency.

A Fairer Test Than the Seal

The licence on the footer is a weak signal, because a rented certificate from a small jurisdiction costs about as much as a second-hand car. The questions below are stronger, and every one of them is answerable in about ten minutes before a deposit rather than a month after a dispute.

Who actually holds the licence, and can you verify it

Check the licence number against the regulator's own register, not the seal image. Clicking a Curaçao Certificate of Operation seal must redirect to the regulator's verification page; if the certificate behind the seal shows a different domain from the one being used, the site is displaying another operator's certificate and should be treated as fraudulent. Anjouan certificates carry a unique licence number and a QR code linking to a public register, and its own guidance says a certificate that cannot be verified there should not be relied upon. A site with a verifiable licence held by a named entity is a different animal from a site with a decorative badge.

Whether the terms contain a sole-discretion clause

Search the terms for "sole discretion", "reserve the right" and "may void". On the British side, guidance states operators should not use terms giving themselves sole discretion to void or withhold winnings, because such terms are unfair within the meaning of the Consumer Rights Act 2015. Offshore, that wording is the norm and there is no regulator to take it to. A terms page with none of those phrases is either carefully drafted or unusually honest. Both are good signs.

Whether identity checks were demanded before the deposit

The Commission expects identity and age checks to be brought forward to before a customer deposits or stakes, and has said onboarding on incomplete or inaccurate information — initials instead of full names, nicknames, commercial addresses instead of residential — is not sufficient. It has also expressed concern about operators using "fuzzy matching" that lets customers in on partial verification. A site that verifies at sign-up and says so is telling you it plans to pay out without a scene. A site that verifies only at withdrawal is telling you something else.

Whether the withdrawal rules state a number

Good operators state limits, fees and processing windows in figures. Bad ones say "as soon as possible subject to review". Where a British operator may not impose a maximum withdrawal limit on the deposit balance — the Commission's own example of a prohibited term is "You may withdraw up to £50 per day and up to £500 per week" — an offshore site can and often does. Look for whether maximum cashout clauses apply to winnings from bonuses and at what multiple, and whether withdrawal fees are cost-reflective or arbitrary.

Whether the dispute route ends somewhere outside the operator

A serious offshore operator names an ADR provider in the player-facing terms. Anjouan requires licensees to designate an approved ADR provider and to list its name and contact details, with complaints expected to be resolved within 30 days before escalation; the providers currently approved there are EGIS ADR, Axion ADR, iGaming ADR and one other firm. Kahnawake employs a full-time Dispute Resolution Officer. A page with no named adjudicator is a page where the operator is the judge, and the house always wins that appeal.

The Bonus Clause That Changes Everything

If one section determines whether a balance is real, it is this one, because the bonus terms decide how much of the money on screen is ever withdrawable. The British rule changed on 19 January 2026: LCCP social responsibility code 5.1.1 now states that licensees must not "apply wagering requirements, which requires a customer to play through bonus funds, over a maximum of 10 times", and must not include more than one type of gambling product within an incentive. The Commission consulted on an outright ban or a cap of 1, 5 or 10 times, chose the cap of 10, and noted that the limit "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements".

The first time a player meets a bonus, the sequence offshore is usually this: the bonus lands, the wagering clock starts, and the requirement is a multiple of the bonus amount or of bonus plus deposit depending on the operator's drafting. Some state it plainly — one published set of terms says the required bet amount equals the bonus amount multiplied by the wager, and that the deposit itself is not included in the calculation. Others bury it. Later, the pattern gets worse rather than better, because secondary clauses take hold as wagering progresses: a maximum bet while wagering, a game-weighting chart where slots count 100 per cent, table games 20 per cent, video poker and blackjack 10 per cent, roulette and baccarat 5 per cent and live dealer games 0 per cent, and bonus-abuse clauses covering low-margin or zero-risk bets. A player grinding a requirement at 5 per cent weighting is not 5 per cent of the way there; they are 5 per cent efficient, and the clock does not care.

The warning signs are specific. A maximum cashout clause capped at a multiple of the bonus is the first. A max-bet rule whose penalty is account closure and forfeiture of winnings is the second — Ignition's terms state that failure to adhere to its max bet rule "may result in account closure, forfeit of the Bonus, and any winnings generated during the wagering of the Bonus". A rule against redeeming two no-deposit bonuses consecutively, with removal of subsequent winnings as the sanction, is the third. On the British side the architecture was dismantled in the consumer's favour: wagering requirements must not apply to play with the deposit balance, deposit and bonus balances must be displayed separately, and a player must be allowed to withdraw their deposit balance at any time, including when a bonus is pending. Offshore, none of that applies.

Doing the Check Before Anyway

Five or six ordinary steps, in the order I would take them. None of them involves a deposit, and none of them requires doing anything a reader would have to think twice about.

1. Read the licensing page before the homepage. Find the named regulator and the licence number, then check it on that regulator's own register. Reason: a seal image costs nothing to copy, and a register entry does not.
2. Open the withdrawal section of the terms and search for numbers. Look for stated processing windows, fees in figures and any maximum cashout clause. Reason: if the terms will not put a number on a payout, the payout has no deadline.
3. Search the terms for "sole discretion", "reserve the right" and "void". Count the hits. Reason: the count is a fair proxy for how much of the outcome the operator has kept for itself.
4. Check whether identity verification happens at sign-up or at withdrawal. Reason: verification at withdrawal is a queue the operator controls at the exact moment the player has the least choice.
5. Read the bonus terms line by line, including game weightings and max-bet rules. Reason: this is the largest single lever on whether winnings are ever withdrawable, and it is set before the first spin.
6. Check the customer-funds disclosure and the operator's insolvency rating. Reason: if the rating is "not protected", the balance is an unsecured claim on a company in another jurisdiction, and that is worth knowing at the start rather than at the end.

The Regulator's Own Numbers

A page like this should carry the enforcement side, because the scale is not hypothetical. Since April 2024 the Commission's Illegal Markets team has issued 3,140 cease and desist and disruption notices — 2,032 C&Ds, 774 registrar referrals, 402 host referrals and 3 payment provider referrals — referred 447,778 Bing and Google URLs and secured 287,961 URL removals, as published on 21 October 2025. Measured across 160 illegal gambling websites, engagement fell an average of 32 per cent after disruption. By method, registrar blocks and website suspensions produced the largest average fall, 91 per cent each, ahead of GEO IP blocking at 60 per cent, Bing removal at 52 per cent, Google removal at 30 per cent and Facebook removal at 8 per cent. The Commission's own reading is that GEO IP blocking and registrar blocks work better than search-engine removals, because removing a site from search makes it harder to find without actually blocking it.

The market is not small and it is not shrinking on its own. Just over 1,000 unique illegal gambling websites were accessed by consumers in Great Britain over the monitored period of May 2024 to July 2025, and the number identified by the Commission's affiliate-page method rose from 364 in May 2024 to 535 in July 2025. But put it in proportion, because both camps of the argument do not. The Commission's analysis published 5 November 2026 estimates that, across the whole population including non-gamblers, 0.6 per cent of respondents engaged with illegal gambling websites in the past four weeks and a further 0.4 per cent in the past twelve months, while 94.4 per cent showed no sign of doing so. Among those who had gambled online in the past four weeks, the estimate is 2.5 per cent, with 1.5 per cent more over the past year. Meanwhile H2 Gambling Capital estimates £16.6 billion was staked with illegal operators in the UK in 2025, up from about £5 billion in 2019, and puts the proportion of gambling happening legally at 92 per cent, down from 97 per cent.

Two numbers, both defensible, describing the same market: a small minority of players, moving a large sum. That is what a market looks like when the route around a control is easy and the awareness of the route is low. It is also why the Commission's Illegal Markets team cites the payment rail as the hard part. Its reporting of transaction data to the Visa Operator Scheme is described as a critical and still early-stage part of the strategy. Blocking money is harder than blocking a URL, and everyone in the trade knows it.

Regulators Compared

The three jurisdictions that come up most often are not equivalent, and the differences are checkable.

Curaçao

The National Ordinance on Games of Chance took effect on 24 December 2024, making the Curaçao Gaming Authority the direct licensing and supervisory authority and replacing the old master-licence and sub-licence model. The four former master licensors stopped issuing on dates between 18 August 2024 and 31 January 2025. Operators validly licensed at entry into force received a six-month provisional licence due to expire on 24 June 2025, which the regulator extended by a further six months to 24 December 2025, requiring full LOK compliance for a full licence. The application fee for a B2C licence is a one-time non-refundable EUR 4,592, plus EUR 150 per ultimate beneficial owner and per qualified interest holder; the total annual B2C fee is EUR 47,450, split EUR 24,490 to the National Treasury and EUR 22,960 to the regulator, payable in full by 15 January. Supplier licensing and supplier registration become fully mandatory from 24 December 2026. A historic /JAZ number or legacy seal must not be treated as proof of a current licence, and one aggregator reading the public register reported 704 licences held by 698 operators, 552 of them active, at 03:30 UTC on 6 November 2026 — a third-party reading, not a regulator publication.

Anjouan

Internet gaming is regulated under the laws of the Autonomous Island of Anjouan, a constituent territory of the Union of the Comoros, on a framework founded on 2005 legislation. The Anjouan Gaming Authority names the Anjouan Offshore Financial Authority as the competent regulatory authority, with Anjouan Licensing Services Inc. as sole authorised licence administrator. B2C and B2B licences cover casino, sports betting, poker and bingo, at EUR 17,828 for issuance and the same for annual renewal, plus EUR 500 per additional domain or URL. Licensing is not a clean story here, and it would be dishonest to pretend otherwise. An ABC News investigation published 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences, that a former attorney-general of the Comoros described the entity selling them as "an illegal entity", and that the AOFA was stripped of recognised-regulator status by Comorian banking laws passed in 2013 and 2015. The authority itself said in a statement on 10 June 2026 that "An Anjouan Internet Gaming Licence is not, and has never been presented as, a universal authorisation to operate in every country in the world". That is a fair statement of what an offshore licence is: a permit in one place, and nowhere else. The authority's claim that an independent legal opinion issued on 19 September 2024 and reconfirmed in February 2026 confirms its lawfulness comes from a licensee's own statement and is not something I would treat as settled.

Kahnawà:ke

The Kahnawà:ke Gaming Commission was established in 1996 and enacted its interactive gaming regulations on 8 July 1999, describing itself as having regulated longer than almost any other jurisdiction. Licensed operators must be hosted at Mohawk Internet Technologies, a data centre in the Mohawk Territory managed by Continent 8 Technologies. It issues one Interactive Gaming Licence at a time — held by Mohawk Internet Technologies since 1999 — plus Client Provider Authorizations. Its Logo Certificate Program, effective 15 January 2010, lets a player click the Commission's logo to generate a Certificate of Good Standing confirming whether a site holds a valid permit. Fees rise on 1 January 2027: the CPA application fee from USD 35,000 to USD 40,000, the five-year renewal from USD 5,000 plus annual fee to USD 40,000 including it, and Key Person permits from USD 5,000 to USD 6,000. Its policing is real: the CPA held by Polar Ventures SDRL was suspended effective 29 September 2026 following a Show Cause Notice.

Half a Million People, and a Register That Keeps Growing

The self-exclusion figures are worth a paragraph of their own, because they explain why this market exists at all. GamStop recorded 117,756 new registrations during 2025 and had 561,983 active exclusions at the end of the year. In the final six months of 2025 there were 58,675 registrations, an average of 319 a day. The first half of 2026 brought a 16 per cent year-on-year increase, with May 2026 setting a monthly record of 12,236 sign-ups, and by July 2026 the register held 614,738 people. Under-25s accounted for nearly one in three of all self-exclusions in that half-year, a 26 per cent year-on-year rise. Among the periods chosen in 2025, 29 per cent picked six months, 24 per cent a year, 25 per cent five years and 22 per cent auto-renewal.

That is a large, identifiable population that has deliberately stepped away, and it is the population a certain kind of offshore operator most wants. The Commission issued an industry warning notice on 20 January 2025 about licensed operators' casino games appearing on unlicensed websites available to GB consumers, noting that such sites often target customers who have self-excluded via GamStop and may have inadequate social responsibility and anti-money-laundering controls.

The land-based schemes are separate, and worth knowing for their differing terms. SENSE covers licensed land-based casinos; its minimum period is six months, extendable to twelve, removal can only be requested in person at a casino during the six-month "Thinking" period, after which a 24-hour cooling-off applies, and if it is neither renewed nor removed the exclusion lapses automatically. The Commission's May 2026 FOI response put its active self-excluded customers at 12,445 between 1 April 2025 and 1 April 2026. GamStop Betting Shops, formerly MOSES, is telephone-based on 0800 294 2060, covers over 60 operators and roughly 6,000 shops, runs for a fixed 12-month term that cannot be ended early, and had 9,075 active self-excluded customers over the same period. Both differ from GamStop Online in one crucial respect: the online scheme's exclusion does not lapse when the term ends. It stays until the person contacts GamStop to remove it. For anyone looking for the one sentence that answers why offshore sites are not an exit, that is probably it.

Where the Money Goes, and Who Answers for It

The awkward truth about an unlicensed balance is that it is not really a balance in any sense a lawyer would recognise. British rules on customer funds exist because a licensed operator must tell a customer how their money is held, in writing, with the customer acknowledging receipt on the first deposit and after any change to the terms. There is an assigned insolvency rating category and it must be disclosed. Offshore, that disclosure is optional, and where it exists it is a sentence in a document nobody reads until something has gone wrong.

What the player has instead is the payment rail. That is the part I would watch, because it is the part that is hard to fake and easy to check. Card and bank rails can be reversed by a provider under its own rules, and a British-licensed operator cannot accept credit card payments at all — the ban took effect on 14 April 2020 — and may only take payment through a provider that is a payment service provider within the Payment Services Regulations 2017. An offshore site taking a crypto deposit at 2am has none of that. The transaction confirms in ten minutes and is then nobody's business but the site's.

How the Complaint Route Differs

Complaints are where the difference between the two systems is least arguable, so it is worth setting out with the numbers. On the British side, LCCP social responsibility code provision 6.1.1 requires licensees to have arrangements for a customer to refer any dispute to an ADR entity free of charge if it is not resolved within eight weeks, and the customer must have been through the operator's own procedure first. There are eight approved providers: ADR Group, Pegasus ADR Service, one other firm, the Centre for Effective Dispute Resolution, eCOGRA, IBAS, ProMediate and Tattersalls Committee. IBAS is the gambling specialist and is free to consumers.

What that machinery actually delivers is worth seeing before trusting it. eCOGRA's report for 1 October 2024 to 30 September 2025 records 911 disputes received, of which "Deposits & Withdrawals" accounted for 150 valid disputes; average time to resolve a domestic dispute was 31 days; 17.8 per cent of completed disputes were ruled in the consumer's favour and 82.2 per cent for the operator; and of 499 invalid disputes, 361 — 72.3 per cent — had not been through the operator's internal procedure first. IBAS's 2024-25 report records 3,721 domestic disputes, 217 of them classified as banking or financial, an average completion time of 20 days, 65 complaints upheld by written decision against 693 not upheld and 737 resolved by a consumer-satisfactory pre-ruling outcome, and 100 per cent operator compliance with decisions in the consumer's favour in both 2023-24 and 2024-25.

Read those two sets together and a picture forms. The route exists, it is free, and it is more likely than not to end in a decision for the operator. What makes it valuable is not the win rate. It is the 100 per cent compliance figure and the fact that a decision can be enforced against a licence the operator wants to keep. Neither of those is available against a company sitting outside the jurisdiction. Anjouan's operators must name an ADR provider and are expected to resolve complaints within 30 days before a player may escalate; Kahnawà:ke has a full-time Dispute Resolution Officer. Both are better than nothing. Neither is a British licence, and the difference is a licence the Commission can suspend, as it did on 3 April 2020 for two operators that failed to integrate GamStop by the 31 March deadline under section 118(2) of the Gambling Act 2005.

The Protection That Exists Anyway

If the offshore route's appeal is that it does not check, then the practical answer is to install checks that do not depend on the operator's goodwill. Two pieces of blocking software are signposted by GamStop itself. BetBlocker is a 501(c)(3) non-profit registered in Delaware, requires no registration, is free worldwide and states it blocks over 1,368,000 gambling websites and 3,100 apps. Gamban states it blocks licensed and unlicensed sites and that its protection is designed to be as difficult to remove as possible; its free UK licence scheme, TalkBanStop, ended on 31 March 2026, after which Gamban is free for residents of Wales but costs £4.99 a month or £29.99 a year in England and Scotland after a seven-day trial.

Bank blocks are the other lever, and they are more powerful than most people assume. The Commission's list of banks offering a gambling blocking service, last updated 16 October 2026, names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling. The mechanics matter: blocks work by declining payments to merchants categorised under gambling Merchant Category Codes, cover online casinos, betting websites, gaming apps and physical venues, and are applied at card level, so each card needs its own activation. Most banks use a cooling-off period of either 48 or 72 hours before gambling transactions are allowed again after a block is switched off, and a block does not affect a credit score. That is a case where the friction is the function. A card that cannot pay an unlicensed site is a better guard than a licence search done at midnight.

What the Numbers Say About Being Outside

Take the four figures that matter and set them side by side. On the licensed side, 96.3 per cent of 44.2 million withdrawals between June and September 2024 cleared without anyone touching them, and the regulator receives around 2,000 withdrawal complaints a year — rising in tone but falling in count, from 2,416 in the year to December 2022 to 1,791 in the year to December 2025. Offshore, a EUR 17,828 annual licence from Anjouan buys an operator a permit that its own regulator has said is not a universal authorisation to operate anywhere, and a EUR 47,450 annual Curaçao framework buys a licence whose verification portal is, as of 7 October 2026, being rebuilt.

The gap between those two columns is not a gap in technology, and it is not a gap in honesty either. It is a gap in who carries the risk. On the British side, the operator carries the cost of checking, and the regulator can take the licence away — as it did for two operators on 3 April 2020, and as it does in the payments strategy it describes as critical and still early-stage. Offshore, the player carries it, and the size of the loss is set by a clause written before the first deposit. The National Gambling Helpline, on 0808 8020 133, free and open 24 hours a day every day of the year, is where that ends when it goes wrong. It is a good number to have and a poor one to need.

Questions About Gambling Not on GamStop

What gambling sites are not on GamStop?

Any operator holding no Gambling Commission licence. The scheme binds only operators licensed in Great Britain, and since 31 March 2020 participation has been a licence condition under LCCP social responsibility code 3.5.5. An operator licensed in Curaçao, Anjouan, Kahnawà:ke or elsewhere, but not in Great Britain, is outside the scheme entirely. A site operating without a British licence at all is outside it too, and is doing so unlawfully under section 33 of the Gambling Act 2005.

Is gambling at a site not on GamStop legal in the UK?

It is not the player who commits the offence. Section 33 of the Gambling Act 2005 makes it an offence for a person to provide facilities for gambling without an operating licence, and that offence attaches to the operator — carrying up to 51 weeks' imprisonment, a level 5 fine, or both. The Commission stated on 21 October 2024 that offering commercial gambling services to consumers in Great Britain without a Commission licence is illegal, including where the operator holds a licence elsewhere.

Do gambling apps not on GamStop differ from websites?

Not in any way that protects a balance. A Curaçao Certificate of Operation Seal is issued only for an approved and registered player-facing domain, so a URL or app claiming a licence must be checked against the register either way. What differs is what is not there. There is no duty to check a customer base against GamStop every 24 hours, no Licence Condition 17 requiring verification before play, and no free ADR route a regulator can enforce against a licence.

Are payouts at offshore casinos quicker than British ones?

Often no, and the comparison is usually unscrupulous. Against a benchmark of 44.2 million licensed withdrawals between June and September 2024, 96.3 per cent cleared automatically and 0.1 per cent took up to 48 hours. Offshore speed comes from skipping checks, not better rails, and the same paperwork that skipped them can impose manual review, a maximum cashout clause or a forfeiture term at the moment the money is owed. Meanwhile the Commission fined one licensed operator £900,000 on 21 October 2026 for delaying withdrawals.

What happens to an un-staked balance if the operator fails?

On the British side, customer funds must sit in a separate client account and the operator must declare one of three protection ratings — "not protected", "medium protection" or "high protection". Even then, a client account does not guarantee a return on insolvency, money in an open bet is not customer funds at all, and British-licensed businesses may hold customer money offshore. A site with no British licence has no disclosure duty whatsoever. Curaçao and Anjouan both require segregation on paper; nothing there guarantees recovery.

Does an offshore site offer a way round self-exclusion?

No, and the framing is the problem. A GamStop exclusion runs for its full term, cannot be cancelled during it, and stays in place after the term until the person contacts GamStop to remove it. An offshore operator taking a bet from someone excluded at a licensed site is not helping them past a technicality; it is simply the one place the exclusion cannot follow them. Help is free on 0808 8020 133, 24 hours a day.

The Short Version

The British licence is a bundle of obligations on somebody else's side of the table — verification before the deposit, a ten-times cap on wagering requirements, no maximum withdrawal limit on a deposit balance, customer-funds disclosure with a stated insolvency rating, and a free dispute route to one of eight approved providers. A site not on GamStop has none of it, which is exactly why the withdrawals can look so quick and the terms look so short.

So the judgement is this. A licence from a small jurisdiction is a price list, not a promise, and the promise a player actually needs — that the balance survives the company — is the one thing no offshore regulator has ever agreed to underwrite. The proof is in the paperwork rather than the seal: a named regulator with a working register, a terms page with no sole-discretion clause, identity verified before the deposit rather than after the win.

And when it goes wrong, the number is 0808 8020 133 — free, run by GamCare, 24 hours a day, every day of the year. Set against a EUR 17,828 annual licence and a 30-day ADR window, it is the only figure in this whole subject that has never been quantified as a cost to the player.

As of 13.11.2026, the Gambling Commission counted 586 illegal gambling websites accessible to British consumers in September 2026 alone — 4 per cent fewer than the previous three-month average, and 4 per cent more than a year earlier.