Online Gambling Sites UK and How Britain's Rules Compare

Online gambling sites in the UK are those licensed by the Gambling Commission; offshore sites hold a foreign licence instead. Commission data for June to September 2024 shows 96.3% of 44.2 million withdrawals cleared automatically. Offshore sites sit outside GamStop, free ADR and British insolvency protection.

One in twenty. That is roughly the share of online gambling money the Commission's own analysis suggests is leaking offshore, and the figures for how much gets staked abroad disagree so violently with each other that the disagreement itself is the story. The Commission's survey work published on 5 November 2026 found 2.5% of people who had gambled online in the past four weeks had engaged with an illegal gambling website, with another 1.5% in the past 12 months. Market-intelligence firm H2 Gambling Capital puts £16.6 billion staked with illegal operators in 2025, up from about £5 billion in 2019. A study by Frontier Economics for the Betting and Gaming Council, by contrast, conservatively estimated £2.7 billion staked annually online on the black market.

That is a gap of a factor of six, and both sides have an interest. The trade body wants the number big to argue regulation is driving people away. The regulator's survey wants it small. What the two agree on is the direction: the offshore share is growing, and the sites most likely to take a British punter's money are the ones with the least obligation to explain themselves.

This page is about how British rules compare with offshore ones. Not which brand is best — nobody needs another affiliate list — but what a licence actually buys, what it conspicuously does not, and where the paperwork stops protecting anybody.

How a Licence Sets the Standard

The phrase "best online gambling sites UK" gets 720 searches a month and tells you nothing, because "best" is doing all the work and none of the definitions. So let me define it the way a regulator would, and the way I would.

A Gambling Commission licence is not a badge of virtue. It is a set of obligations with the threat of a section 118 suspension behind them. The Commission has form: on 3 April 2020 it suspended the licences of two online operators, Dynamic (trading as an operator) and Sportito, for failing to integrate GAMSTOP by the 31 March deadline. That is the standard of comparison. Everything else is a variation on it.

What the licence buys a player is unglamorous and largely invisible. It means the operator is in GamStop, checks its whole customer base against the register at least every 24 hours, cannot offer credit card deposits, cannot offer reverse withdrawals, cannot impose a maximum on what you withdraw from your deposit balance, and must let you take a dispute to an approved Alternative Dispute Resolution provider free of charge after eight weeks.

Offshore, the same site may be perfectly legitimate in its own jurisdiction. Anjouan requires operators to segregate player funds, to use independently certified random number generators, and to designate an approved ADR provider — EGIS ADR, Axion ADR, iGaming ADR or an ADR provider. That is not nothing. But Anjouan also says plainly that "An Anjouan Internet Gaming Licence is not, and has never been presented as, a universal authorisation to operate in every country in the world." Which is a polite way of saying the licence in the footer may have no bearing whatsoever on the legality of the site taking your deposit in Manchester.

The licence that is not what it looks like

Curaçao is where this gets interesting, because the market has been living off an outdated mental image of it for years. The LOK reform took effect on 24 December 2024 and replaced the old master-licence and sub-licence model with direct licensing by the Curaçao Gaming Authority. Licensing activities ceased for the four former master licensors on staggered dates: Gaming Curaçao (365/JAZ) on 18 August 2024, Curaçao eGaming (1668/JAZ) on 1 October 2024, an operator (8048/JAZ) on 1 November 2024, and Curaçao Interactive Licensing (5536/JAZ) on 31 January 2025.

The legacy "orange" sub-licence certificates of operation ended on 15 October 2025. The CGA's own framework page says a historic /JAZ number or legacy seal must not be treated as independent proof that an operator currently holds a valid licence. If a site is still waving a 8048/JAZ seal about in 2026, that tells you something about the site, and nothing at all about its licensing status.

Then, on 7 October 2026, the CGA announced that its previous online gaming portal would not return to service and that it is working on an alternative mechanism for verifying licensed domains, because the previous digital licence seal may be affected by the transition. In other words: at the time of writing, the Curaçao seal is in a period of genuine uncertainty, and the CGA says so itself. I would rather have a regulator that admits the problem than one that pretends. But a player trying to check a seal today is checking a thing that is mid-repair.

Where the Money Goes

"UK online gambling sites" is the phrase people type when they want one that will pay out. Fair enough. Payout is the whole point. So here are the Commission's own numbers on withdrawals, and they are better than the industry's marketing.

Gambling Commission data covering June to September 2024 records 44.2 million withdrawals by customers of large online operators. Of those, 96.3% cleared automatically, 3.5% cleared within 24 hours and 0.1% took up to 48 hours. Set that against the complaint traffic: the Commission's Annual Report and Accounts 2024-25 states that issues relating to withdrawals continue to be the cause of most complaints it receives. Complaints coded "Withdrawals and/or financial transactions" fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025. A small, persistent rump against an enormous volume.

The one figure that matters most to me is 49%. Consumer research on trust published on 23 July 2026 found 49% of people who had gambled in the past 12 months agreed that "it is quick and easy to withdraw and collect my winnings", with 33% neutral and 18% disagreeing. Half of the market agreeing is not a ringing endorsement. It is a market where the median experience is fine and the tail is grim.

Payout Rails and Transfer Speeds

Here is where the licence stops mattering and the plumbing starts. Once an operator approves a withdrawal, the money travels down rails that have nothing to do with gambling regulation, and the speed is a of the rail. The table below is about method, not brand.

Two things fall out of that table. First, the "instant withdrawal" claim in casino marketing almost always refers to the operator's own approval step; the rail beneath it may take minutes or days, and the operator is not being wholly straight about which bit it is timing. Second, and more importantly, the fee column is where an offshore site can eat a payout without ever breaching a term. A 2.80% wallet-withdrawal charge on a €3,000 balance is €84 before any currency conversion, and Skrill applies a 4.49% foreign-exchange fee where conversion is needed. Nobody running a UK-licensed site can impose a maximum on your withdrawal, but nobody said the plumbing had to be cheap.

Incidentally, if a British-licensed operator did try to cap you, it would be on thin ice. The Commission's guidance gives the prohibited example as "You may withdraw up to £50 per day and up to £500 per week". Operators are allowed a cost-reflective processing fee, and reasonably limiting the number or size of separate withdrawals, provided it is made clear before the deposit and the charge does not exceed the direct cost of processing.

The Checkable Benchmark of 614,738 on the Register

If you want one number to judge this market by, take the self-exclusion register, because it is the one dataset that measures harm rather than revenue.

As of July 2026 Gamstop Online reported 614,738 consumers currently on the register, of whom more than one in two had opted for the maximum five-year exclusion; across all age groups only one in four had self-excluded for six months. The 2026 sign-up figures are uglier still: a 16% year-on-year increase in registrations during the first half of 2026, with May 2026 setting a new monthly record of 12,236 sign-ups. Under-25s accounted for nearly one in three of all self-exclusions in that half-year, a 26% year-on-year increase. Gamstop's 2025 annual report recorded the gender split of registrants as 94.3% male and 5.7% female.

The exclusion periods chosen in 2025 tell their own story: 29% chose 6 months, 24% chose 1 year, 25% chose 5 years and 22% chose auto-renewal. Three-quarters of people picking a term longer than the shortest available is not a market that has persuaded its customers it is under control.

And this is the pivot of the whole comparison, so I will put it as directly as I can. Registering with Gamstop Online blocks you from gambling with all online gambling companies licensed in Great Britain for 6 months, 1 year, 5 years or 5 years with auto-renewal. Once registered you cannot cancel or deactivate your registration during the exclusion period, and the exclusion stays in place after the end of the chosen period unless you contact Gamstop to remove it. Gamstop's 2025 annual report devotes a whole section to its refusal to remove registrations before the chosen term ends. If you do not deactivate, Gamstop holds your data through a further automatic seven-year self-exclusion period during which operators are told you were previously excluded. Only during the last six months of a five-year term may you switch off auto-renewal, and auto-renewal continues for up to four new five-year periods.

That is a serious, deliberately sticky protection — and it is a protection with a border. Gamstop Online can only exclude you from participating operators; it is unable to prevent access to gambling services run by organisations that do not participate in the scheme. The Gambling Commission's licence condition Social Responsibility Code Provision 3.5.5 requires licensees to participate in the national multi-operator self-exclusion scheme, and a breach of an SR code is a breach of licence condition under section 82(1) of the Gambling Act 2005. An offshore operator holds no such licence, so there is no such obligation. The Gambling Commission's warning notice of 20 January 2025 noted that unlicensed sites often target customers who have self-excluded via GAMSTOP and may have inadequate social responsibility and AML controls. A self-exclusion is not a wall around the internet. It is a wall around one regulated market.

The other half of the border is land-based. SENSE is the official national self-exclusion scheme covering all licensed land-based casinos in Great Britain, operated by Self Enrolment National Self Exclusion Ltd, with a minimum period of six months extendable to twelve, and removal only in person at a casino during the six-month "Thinking" period that follows, then a 24-hour cooling-off period. Under SENSE, if the exclusion is neither renewed nor removed, it is automatically removed at the end of the Thinking period. Gamstop Betting Shops, previously MOSES, is telephone-based on 0800 294 2060, excludes a customer from bookmakers' shops in the areas they name for a fixed 12-month term that cannot be ended early, and works with over 60 operators across approximately 6,000 shops. Different schemes, different rules, and a person can be excluded from one and not the others.

Identity Checks and What This Topic Turns On

If one mechanism decides whether an offshore site is a reasonable substitute for a licensed one, it is identity verification — and it is not really about fraud. It is about friction, and who controls it.

Here is how it works on a British-licensed site, first time. Licence Condition 17 has been in place since 7 May 2019 and requires licensees to obtain and verify information establishing a customer's identity before that customer is permitted to gamble, covering at least name, address and date of birth. Before permitting a deposit, the operator should tell you what documents or information it may need, in what circumstances and in what form. In practice, most verification is done electronically by matching the account against credit reference agency and electoral roll data, which is why the majority of players never see a document request. The Commission's 2024-25 reporting and its 12 August 2026 blog make the direction of travel clear: it expects identity and age checks brought forward to before a customer deposits or stakes, and it says onboarding on incomplete or inaccurate information — initials instead of full names, nicknames, commercial addresses instead of residential — is not sufficient.

It also says something quietly damning: onboarding a customer using a middle name instead of a forename can create mismatches with records held elsewhere, such as GAMSTOP, undermining the effectiveness of self-exclusion. The anti-fraud check and the harm-prevention check run on the same data, and sloppiness in one breaks the other.

Later, on a UK site, the checks should not surprise you. Licence Condition 17.1.1 states a customer's withdrawal request must not result in a requirement for additional information if the licensee could reasonably have requested that information earlier. That prohibition does not override a separate legal duty, such as an anti-money-laundering requirement, which is why source-of-funds questions do sometimes arrive late. Under the Money Laundering Regulations 2017, remote casinos must identify and verify when a customer deposits or withdraws €2,000 or more, and the threshold applies both to a single transaction and to transactions that appear to be linked — linked including activity forming part of a customer's overall pattern during a single logged-on period. A remote casino may use what the Commission calls the "hybrid approach", identifying customers and verifying age at registration but deferring full verification until the €2,000 threshold is triggered.

And crucially: operators cannot confiscate funds because ID has not been provided. Where a business delays a withdrawal for insufficient ID it may be in breach of Licence Condition 17 and may face regulatory action. The Commission's 2026 blog reported that over a quarter of complaints reaching its Contact Centre concern identity verification, a concern customers raise when asked for documents only on attempting to withdraw. Its August 2026 blog adds a genuinely useful warning about "fuzzy matching" through third-party verification providers, and about onboarding customers on partial or equivocal verification.

The warning signs

The offshore version of the same moment looks different, and you can spot it before you deposit:

• Verification only appears at withdrawal. If a site lets you deposit freely and then produces a document request the moment you try to leave, it has inverted the order the Commission insists on.
• The document list is open-ended. "Such other documents as we may reasonably require, at our sole discretion" is not a compliance process, it is a lever.
• A fee to withdraw. A cost-reflective processing charge is permitted in Britain. A percentage of the withdrawal dressed up as processing is a different animal.
• Terms that let the operator decide. The Commission says operators should not use terms giving them sole discretion to void or withhold winnings, because such terms are unfair under the Consumer Rights Act 2015.
• No named ADR provider. Anjouan requires licensees to list an Authority-approved ADR provider with contact details. If the terms page names nobody, there is nowhere to go.

Five Signs an Operator Can Be Trusted

Not proof — signs. Each one is checkable in a few minutes, and each is a question about paperwork rather than about how the site looks.

The licence is on the public register and the domain matches

The Commission advises consumers to check that a business holds a British Gambling Commission licence and to click through to the public register to see whether the site's activities and domain names match. A licence that exists but does not name the domain you are looking at is the single most common sleight of hand. Five minutes on the register settles it.

The customer-funds rating is stated in writing

Under LCCP conditions 4.1.1 and 4.2.1, a gambling business must select one of three customer-funds protection ratings — "not protected", "medium protection" or "high protection" — state in its terms which applies, and include its assigned insolvency rating category. An operator rated "not protected" must remind the customer once every six months that their funds are not protected in the event of insolvency, stating the value of funds held. The disclosure must be given in writing and acknowledged before funds are used for gambling. Read that page before depositing, not after.

There is a named ADR route, free to the consumer

LCCP social responsibility code provision 6.1.1 requires licensees to have arrangements for customers to refer any dispute to an ADR entity free of charge if it is not resolved to their satisfaction within eight weeks of receipt of the complaint, after the operator's own complaints procedure. The Commission's approved list is ADR Group, Pegasus ADR Service, one licensee, the Centre for Effective Dispute Resolution, eCOGRA, IBAS, ProMediate and Tattersalls Committee. IBAS covers the remote sectors and is free to consumers. If the terms name no ADR entity, the site is not offering the British baseline.

Bonus terms are complete within one click

LCCP social responsibility code 5.1.9 requires all significant conditions applying to marketing incentives to be provided transparently and prominently, and where online displayed in full no further than one click away. The Committee of Advertising Practice guidance published with the Commission on 11 September 2025 says the same for free bets and bonuses. If the full terms take four clicks and a login, that is a choice the operator made.

The advertised wagering requirement is within the legal cap

From 19 January 2026, licensees must not apply wagering requirements over a maximum of 10 times, and must not include more than one type of gambling product within an incentive. The Commission said the limit "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements". Offshore, no such cap applies: trade coverage describes offshore welcome offers as typically 25x to 40x, and a 2026 casino-guide comparison puts offshore welcome bonuses at 35x to 50x and no-deposit bonuses at 40x to 60x with a €50 to €100 cashout cap. A site advertising 40x is not necessarily dishonest. It is simply not bound by the number a British-licensed site is bound by.

How to Judge an Online Gambling Site in Six Steps

Ordinary checks, in order. Each one has a reason attached, because a checklist without reasons is just a ritual.

1. Find the licence number in the footer and check it against the Gambling Commission's public register. Confirm both that the licence exists and that the domain you are on appears on it. Reason: a live licence that does not cover this website is not a licence for this website, and the register shows activities and domain names separately.
2. Read the customer-funds page for the insolvency rating. Under LCCP 4.1.1 and 4.2.1 the operator must state whether funds are "not protected", "medium protection" or "high protection", and must include its assigned insolvency rating category. Reason: keeping customer money in a separate client account does not mean customers get it back if the operator becomes insolvent, and the Commission notes that gambling businesses are legally allowed to hold customers' money in overseas bank accounts.
3. Check the withdrawal terms for anything that limits, delays or charges. Look for per-withdrawal caps, processing fees expressed as a percentage, or a rule barring a second request until the first is authorised. Reason: the Commission found a term stating customers could request only one withdrawal at a time, and could not request another until the original was authorised, unfair under the Consumer Rights Act 2015 when it settled with an operator in October 2026.
4. Establish whether the site is in GamStop before you need it to be. A British-licensed operator checks its entire customer base against the register at least every 24 hours, a requirement introduced in April 2020. Reason: if the site is offshore, no such check happens, and the exclusion you set elsewhere will not follow you here.
5. Confirm which ADR provider covers the site and how long the operator takes to resolve a complaint. The route is: operator's internal process, then ADR free of charge after eight weeks. Reason: eCOGRA's report for 1 October 2024 to 30 September 2025 records 911 disputes received, an average 31 days to resolve domestic disputes, and 17.8% of completed disputes ruled in favour of the consumer. IBAS's 2024-25 report records 3,721 domestic disputes, an average completion time of 20 days, and 100% operator compliance with decisions in the consumer's favour in both 2023-24 and 2024-25. A named provider with published statistics is worth more than a promise.
6. Set a deposit limit at the point of opening the account, and know that you will be prompted anyway. From 31 October 2025 all gambling businesses must prompt customers to set a financial limit before their first deposit, and under RTS 12E setting a financial limit must be presented as the default option, with the customer taking an action to decline and confirming that decision. Reason: the prompt is a legal obligation on licensed sites; on an offshore site it is whatever the operator feels like doing.

None of those six steps requires any special knowledge, and none of them involves gambling to test anything.

Understanding New Online Market Entrants

The phrase "new online gambling sites uk" gets searched a lot, and the appetite for novelty is worth a cold look, because novelty and risk travel together.

A new site is cheapest to launch where the fixed costs are lowest. In Curaçao the application fee for a B2C gaming licence is a one-time non-refundable EUR 4,592, with EUR 150 per ultimate beneficial owner and EUR 150 per qualified interest holder, and the total annual B2C fee is EUR 47,450, made up of a EUR 24,490 licence fee to the National Treasury and a EUR 22,960 supervisory fee to the CGA. In Anjouan the published schedule is EUR 17,828 for B2C licence issuance, one-time, the same for annual renewal, with EUR 500 per additional domain or URL. Against Malta's one-time non-refundable EUR 5,000 application fee, EUR 25,000 fixed annual licence fee and 5% gaming tax on revenue, and a EUR 100,000 minimum paid-up share capital for Type 1 and Type 2 B2C licences. Kahnawake is pricier still: from 1 January 2027 the Client Provider Authorization application fee rises from USD 35,000 to USD 40,000, and the five-year renewal from USD 5,000 plus the annual fee to USD 40,000 including it, while the annual CPA fee stays at USD 20,000.

That is the arithmetic of the offshore end of the market, and it explains the shape of it. A jurisdiction where the entry ticket is four and a half thousand euro and the annual bill is under fifty thousand will always have more sites going up and coming down. An ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around EUR 17,000 per licence per year, and that Comoros financial intelligence officials described Anjouan Corporate Services as operating illegally; a former attorney-general of the Comoros called the licensing seller "an illegal entity". Anjouan Gaming's own statement on 10 June 2026 conceded the principle: no licensing authority can exempt an operator from local law where local authorisation is required.

Curaçao has been tightening, and the register volume shows it. A third-party tracker reading the CGA's public register counted 704 Curaçao licences held by 698 operators, of which 552 were active, as of a read at 03:30 UTC on 6 November 2026. Note the hedging: that is an aggregator's reading, not a CGA publication, and it is reported as such. The CGA itself said on 7 October 2026 that the previous verification portal would not return and that it is working on an alternative — which is a regulator mid-repair saying so out loud.

If you want the honest generalisation: new sites are disproportionately offshore, offshore licences are cheap in the jurisdictions that issue most of them, and the CGA's own materials warn that a certificate showing a different domain from the site you are on belongs to another operator and should be considered unauthorised or fraudulent.

Assessing the Safety of Licensed Sites

"Which are the safest online gambling sites UK?" has a dull answer and an interesting one.

The dull answer: the ones on the register, because the protections are structural rather than promises. British-licensed sites set the standard of comparison, and the standard is dense. Since 31 March 2020 all online gambling operators must be part of GAMSTOP as a condition of their licence. Credit cards have been banned for gambling since 14 April 2020, and operators must also ensure that where they accept payment from an e-wallet, the money was not loaded from a credit card. Reverse withdrawals were permanently banned under RTS requirement 14B from 31 October 2021: "Consumers must not be given the option to cancel their withdrawal request." Online slots carry a £5 maximum stake per game cycle for all adults since 9 April 2025, and £2 for 18 to 24 year olds since 21 May 2025, with at least 2.5 seconds from the start of a game until the next game cycle can begin under RTS 14D. Financial vulnerability checks became a licensing requirement in August 2024 at £500 net deposits over a rolling 30 days, lowered to £150 net deposits over a 30-day period effective 28 February 2025.

The interesting answer is about what happens at the edge of all that. Offshore, there is no GamStop, no free ADR entitlement, no credit card ban, no reverse withdrawal ban, no stake limit, and no insolvency rating to read. Some offshore regulators do impose real standards — Anjouan requires segregated player funds, independently certified RNGs and AML/CTF controls; Kahnawake requires a licensee's relationship with players to be contractual and free of terms that are unfair or unreasonable, and states that its own voluntary self-exclusion is permanent and irrevocable, with a player who breaches a self-exclusion prohibition forfeiting deposited and won funds to a third-party charity. Those are not decorative rules. But none of them is enforceable by the body that can suspend a licence in Britain, and none of them survives an operator simply going out of business.

Now the part that offshore operators rarely say out loud, and that a British operator cannot say at all: the licence is not a service guarantee. Customer funds held by a remote operator must be kept in a separate client bank account or accounts, separate from the operator's business accounts. But money staked within an open bet is not considered customer funds, and is therefore not covered by any insolvency arrangements. And the LCCP sets no fixed maximum number of days within which an operator must complete a withdrawal; the regime relies on the fair-and-open condition 7.1.1, the identity-verification condition 17.1.1 and the prohibition on unfair terms rather than a stated deadline. If someone tells you a British licence means your money will arrive by a fixed date, they are describing a regime that does not exist.

Where to Get Help

Early and plain, because the rest of this page is about rules and this bit is about people.

Offshore sites are not licensed in Great Britain. They hold no Gambling Commission licence, so no Commission licence condition applies to them, and — as the Commission's own warning notice of 20 January 2025 put it — such sites often target customers who have self-excluded via GAMSTOP and may have inadequate social responsibility and AML controls. The regulator is also not an ombudsman: it cannot resolve individual complaints or get anyone's money back, though it records complaints and refers disputes to an independent third party.

The help that does exist is free and does not care which site you used. The National Gambling Helpline is operated by GamCare, available free of charge on 0808 8020 133, 24 hours a day, every day of the year, with live chat and WhatsApp on the same number. For callers in Wales the number given is 0808 2819 265. BeGambleAware is the public-facing brand of the charity GambleAware and directs people to the same helpline. GamFam, a registered charity set up by people affected by the gambling of family and friends, runs GRA5P, a structured five-stage peer-support programme, with meetings currently held remotely and usually six to ten members per group. Gamblers Anonymous England, Wales & Ulster can be reached on 0330 094 0322, with around 250 meeting locations and no appointment needed; Gam-Anon UK & Ireland supports family and friends regardless of whether the gambler attends. NHS gambling treatment is real provision now, not a pilot: NHS England had opened 15 specialist gambling clinics across England since 2019, seven of them in the year to December 2024, when almost 2,000 people were referred between April and September 2024 against just over 800 in the same period the previous year. Integrated care boards commission 8 regional NHS gambling services, currently receiving almost 5,000 referrals a year against a target of 3,000. Citizens Advice Scotland runs a gambling support service advice line on 0800 328 1131, Monday to Friday 10am to 5pm.

The funding behind much of this is the statutory levy, introduced by the Gambling Levy Regulations 2025 and commenced on 6 April 2025, charged at 1.1% of previous-year Gross Gambling Yield for all online operators, which raised just under £120 million in its first year, ringfenced solely for research, prevention and treatment. Blocking software is the other practical layer: Gamstop signposts Gamban and BetBlocker, and BetBlocker states it blocks over 1,368,000 gambling websites and 3,100 apps, requires no registration and is free worldwide. Bank blocks are worth knowing about too — the Commission's list last updated on 16 October 2026 names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling, though most banks use a cooling-off period of either 48 or 72 hours before gambling transactions are allowed again.

How Many Online Gambling Sites Are There in the UK, and Does the Count Matter?

Genuinely, it matters less than the number people expect. There is no single official count of "online gambling sites in the UK", because the meaningful figure is not the number of websites but the number of operating licences — one company can run seven websites under one licence and appear as seven sites. So the honest answer is: nobody publishes a clean total, the Commission's public register is the closest thing to a source, and any list you find with a number in the headline is counting something the regulator does not count.

What the Commission does publish is the enforcement side, and its scale tells you how fluid the offshore population is. Since April 2024 the Commission's Illegal Markets team has issued 3,140 Cease and Desist and disruption notices, comprising 2,032 C&Ds, 774 registrar referrals, 402 host referrals and 3 payment provider referrals, referred 447,778 Bing and Google URLs and secured 287,961 URL removals. Across 160 illegal gambling websites for which web traffic data existed, there was an average 32% decrease in engagement following disruption activity. By method, registrar blocks and website suspensions produced the largest average fall in engagement at 91% each, ahead of GEO IP blocking at 60%, Bing removal at 52%, Google removal at 30% and Facebook removal at 8%.

The pace is accelerating. In July to September 2026 alone the Commission referred 1,835 websites (7,677,211 URLs) and issued 546 cease and desist notices to illegal operators, against 366 website referrals in April to June 2026. The Commission's illegal gambling dashboard recorded 586 illegal gambling websites accessible to GB consumers in September 2026, 4% less than the previous three-month average but 4% more than September 2025. And the enforcement tool that bites hardest is not the one most people would guess: the Commission reports that GEO IP blocking and registrar blocks are more effective than search-engine removals, because search-engine removal makes a site harder to find but does not fully block access. Its own analysis found that across the monitored period from May 2024 to July 2025, just over 1,000 unique illegal gambling websites were accessed by consumers in Great Britain — a number that stays roughly flat while the individual domains churn, which is exactly what you would expect from a market where the entry ticket is a few thousand euro.

The UK Online Gambling Market

The British market's protections are real and structural, and they stop at the coastline; the offshore market's licensing is cheap and uneven, and a player's experience of it is decided at the payout screen rather than the lobby.

A few things worth carrying away. The Commission's own figures show the median licensed withdrawal is fast — 96.3% of 44.2 million withdrawals in June to September 2024 cleared automatically — while nearly half of players still would not call withdrawing quick and easy, which tells you the problem is concentrated rather than spread. Gamstop's numbers are doing the opposite of improving: 614,738 people on the register as of July 2026, with May 2026 setting a record at 12,236 sign-ups, and under-25s now accounting for nearly one in three new self-exclusions. And the £2,000 threshold for identity checks in a remote casino is not a small-print matter — transactions that appear to be linked count together, including activity forming part of a customer's overall pattern during a single logged-on period.

Which leaves one fact that sums up the difference better than any other. Under Kahnawake rules a player who breaches a self-exclusion prohibition forfeits any funds deposited or won to a third-party charity selected by the Commission. Under British rules, operators must close the account of anyone who has entered a self-exclusion agreement and return the funds held in it, and the LCCP states it is not sufficient merely to prevent the individual from withdrawing funds while still accepting wagers. Same industry, two entirely different instincts about whose money that is. The licence keeps the balance.

FAQ

Which are the best online gambling sites UK players can actually verify?

None on reputation. Verification is a document trail: the licence number in the footer, the domain named on the Commission's public register, and the customer-funds rating stated in the terms under LCCP 4.1.1 and 4.2.1. An operator rated "not protected" must remind you every six months that your funds are unprotected, stating the value held. If the terms do not tell you which of the three ratings applies, the paperwork is already failing you.

Do uk online gambling sites have to be in GamStop?

Yes, if they hold a Gambling Commission licence. Under Social Responsibility Code Provision 3.5.5, licensees must participate in the national multi-operator self-exclusion scheme, and a breach of an SR code is a breach of licence condition under section 82(1) of the Gambling Act 2005. Since April 2020 operators must also check their entire customer base against the register at least every 24 hours. Offshore sites are not connected to it.

Do new online gambling sites uk operators go bust more often?

The economics point that way. Curaçao's total annual B2C fee is EUR 47,450 from a one-time application fee of EUR 4,592; Anjouan charges EUR 17,828 for issuance and the same for annual renewal; Malta requires EUR 25,000 a year plus 5% gaming tax and EUR 100,000 paid-up capital for Type 1 and 2 licences. Cheap entry means more sites going up — and more coming down, usually mid-withdrawal.

Which are the safest online gambling sites uk players should compare against?

Treat British-licensed sites as the benchmark and judge the rest by what they lack: no GamStop membership, no free ADR entitlement after eight weeks, no credit card ban since 14 April 2020, no reverse withdrawal ban under RTS 14B since 31 October 2021, no insolvency rating to read. Some offshore regulators do impose real standards, but none of them can suspend a licence in Britain, and none survives an operator closing.

What does "top 10 online gambling sites uk" style list miss?

The two things that decide outcomes: who holds the money and who settles a dispute. Lists rank by welcome offer, and the offer is the least durable feature of any site. Under LCCP 4.1.1 and 4.2.1 the operator must disclose its insolvency rating in writing and the customer must acknowledge it before funds can be used for gambling. That acknowledgement, not a league table, is the disclosure that matters.

Can I get a list of online gambling sites uk licensed and offshore together?

You can build one, but it will be stale within a month, and it will misleadingly mix two different legal categories. The Commission's public register is the only live authoritative source for British licences, and it should be checked by licence and domain, not by brand name. Offshore registers are in flux: Curaçao's previous verification portal will not return, the CGA said on 7 October 2026, and it is working on an alternative mechanism.

Where British Rules Stop

Offshore sites are compared with the British standard constantly, and mostly the comparison is flattering to the standard — until you look at the demand for offshore sites anyway. Offshore licensing is cheap, its registers are mid-repair, and its regulators say out loud that a foreign licence authorises nothing in Britain. The British alternative is dense, enforceable and bluntly paternalistic about self-exclusion, which is precisely why it is worth having.

One last number, from the Commission's September 2026 dashboard: 586 illegal gambling websites accessible to GB consumers, 4% fewer than the previous three-month average but 4% more than a year earlier. The count barely moves. The domains do. That is a market being swept rather than closed, and anyone choosing a site in it is choosing which regulator's paperwork they would rather be relying on when something goes wrong.