Online casinos not on GamStop hold no Gambling Commission licence, so the scheme cannot block them and British protections do not reach them. Their payout speeds, bonus terms and identity checks follow offshore rules, not the LCCP. Most offer nothing unique; a few pay quickly and honestly.
I have spent years reading the paperwork behind these sites — the licensing certificates, the terms that run to eleven pages above the fold, the small clause that arrives the moment anyone tries to take money out. The appeal is obvious and it is almost never about the games. It is about the distance between a British licence and a Caribbean one, and what that distance buys and costs.
That distance is worth measuring. British-licensed operators must be part of Gamstop Online as a condition of their licence — a rule resting in social responsibility code provision 3.5.5, in force since 31 March 2020 — and since April 2020 they must also check their entire customer base against the register at least every 24 hours. An offshore site has no such duty. It sits outside the scheme, outside the £5 slot stake cap that came in for adults on 9 April 2025 and the £2 cap for 18- to 24-year-olds on 21 May 2025, and outside the 10× wagering cap that took effect on 19 January 2026. What it offers instead is a different rulebook, and the only sensible question is whether that rulebook pays out.
It usually does, and that is the honest answer. The Gambling Commission's own analysis, published 5 November 2026, estimated that among people who had gambled online in the previous four weeks, 2.5 per cent had engaged with an illegal gambling website. That is not a mass movement. It is a small, persistent minority, and the sites serving it vary enormously in quality.
Two things should be said plainly before anything else. A site without a British licence is not licensed in Great Britain, and offering commercial gambling to consumers here without one is an offence under section 33 of the Gambling Act 2005. And self-exclusion is not a firewall with a side door: a GamStop exclusion holds for its full term — six months, one year, five years, or five years with auto-renewal — and then stays in place until the person contacts GamStop to remove it. An offshore site is not a way round that. If gambling has stopped being a pastime, the National Gambling Helpline, run by GamCare, is free on 0808 8020 133, twenty-four hours a day. In Wales the number given is 0808 2819 265.
Table of Contents12
- What the Numbers Say About Offshore Casinos
- How a UK Online Casino Not on GamStop Is Built
- UK Online Casinos Not on GamStop Licence Regimes Compared
- Bonus Terms Are Where the Money Goes
- Five Signs to Check for New Sites
- How to Vet an Offshore Casino Before Depositing
- Understanding the Legal Offences of Unlicensed Sites
- Why "Best" Is the Wrong Word for Offshore Casinos
- Recent Industry Changes in 2026
- What Goes Wrong, and Where the Help Is
- FAQ
- The Short Version
What the Numbers Say About Offshore Casinos
Start with the regulator's statistics rather than the marketing. In data covering June to September 2024, cited in a speech delivered on 6 November 2025, the Commission recorded 44.2 million withdrawals by customers of large online operators: 96.3 per cent cleared automatically, 3.5 per cent within 24 hours and 0.1 per cent took up to 48 hours. Those are British-licensed figures, and they set the standard of comparison. A generic "fast payouts" badge on an offshore site means nothing until it is set against a benchmark of roughly nineteen in twenty withdrawals clearing without friction.
The offshore market's own numbers are softer. The Commission's Illegal Markets team has issued 3,140 cease and desist and disruption notices since April 2024, referred 447,778 Bing and Google URLs and secured 287,961 removals — figures published 21 October 2025. Across 160 illegal gambling websites with traffic data, engagement fell by an average of 32 per cent after disruption. Market-intelligence estimates differ wildly: H2 Gambling Capital put stakes with illegal operators at £16.6 billion in 2025, up from about £5 billion in 2019, while a Frontier Economics study for the Betting and Gaming Council estimated £2.7 billion staked annually online. When two reputable estimates diverge by a factor of six, the honest reading is that nobody measures this well.
I take the Commission's population survey more seriously than either. Nearly 95 per cent of respondents showed no indication of using an illegal site. This is a niche, not a shadow industry.
How a UK Online Casino Not on GamStop Is Built
The structure explains the behaviour. A British licence comes with the levy — 1.1 per cent of previous-year gross gambling yield for online operators, commenced on 6 April 2025, raising just under £120 million in its first year, ringfenced for research, prevention and treatment. It comes with identity checks before the first bet, a credit card ban in force since 14 April 2020, withdrawal rules that forbid delaying a payout for want of documents that could have been requested earlier, and the Financial Risk Assessment regime the Commission announced on 7 July 2026, beginning with the largest operators at £5,000 net deposits in a rolling 24 hours.
An offshore operator pays a fraction of that. A Curaçao B2C licence carries a one-time application fee of EUR 4,592 and a total annual fee of EUR 47,450. Anjouan quotes EUR 17,828 for issue and the same again annually. Those numbers are not trivial, but they are not a British levy, and they buy supervision of a different order. Whether that makes the games worse is a separate question — random number generators are certified in several jurisdictions — but it undeniably makes the customer-protection layer thinner.
UK Online Casinos Not on GamStop Licence Regimes Compared
The licence is the first thing to check, and the easiest thing for an operator to dress up. A historic /JAZ number or a legacy "orange" seal is not proof of a current Curaçao licence; those certificates of operation ended on 15 October 2025, and the Curaçao Gaming Authority states plainly that a legacy seal must not be treated as independent evidence of a valid licence. This table compares regimes by what they actually impose.
| Regime | Cost of a licence | What it requires of the operator | Self-exclusion link |
|---|---|---|---|
| Great Britain (Gambling Commission) | 1.1% of previous-year GGY via the statutory levy, commenced 6 April 2025 | Gambstop Online participation under SR code 3.5.5; customer-base checks every 24 hours; identity verification before gambling; 10× cap on wagering requirements from 19 January 2026 | Must join Gamstop Online |
| Malta (MGA) | EUR 5,000 application, EUR 25,000 annual fee, 5% gaming tax | B2C licence, EUR 100,000 share capital for Type 1 and 2; publishes an Unauthorised URLs list | No UK scheme link |
| Curaçao (LOK) | EUR 4,592 application; EUR 47,450 total annual | Direct licensing by the CGA since 24 December 2024; Certificate of Operation Seal only for an approved domain | No UK scheme link |
| Anjouan | EUR 17,828 issue, EUR 17,828 renewal | Segregated player funds, certified RNGs, AML and age verification; no territorial restriction claimed under Anjouan law | No UK scheme link |
| Kahnawake | USD 40,000 CPA renewal from 1 January 2027 | Must be hosted at Mohawk Internet Technologies; permanent, irrevocable voluntary self-exclusion | No UK scheme link |
| Costa Rica | No licence regime | Bill No. 25,057 rejected in early 2026; no formal gambling licensing framework | None |
Two entries deserve a note. Malta is an EU regulator with real teeth, publishes a list of unauthorised URLs, and is not a soft option — an MGA licence is not a UK licence, but it is not a fig leaf either. Costa Rica, by contrast, has no comprehensive gambling licensing regime at all; the "data processing licence" sometimes cited in the trade is not a licence in the legal sense, and Bill No. 25,057, which would have created a mandatory regime, was rejected by its Legislative Assembly in early 2026.
Bonus Terms Are Where the Money Goes
The single thing this topic turns on is the bonus term, because that is where an offshore site recovers everything its licence fee did not cost it. A British operator has been capped since 19 January 2026 at 10× wagering requirements on bonus funds, must not mix product types inside one incentive, and must not impose any maximum limit on what a customer may withdraw from their deposit balance. Offshore, none of that applies.
The first-time version is friendly. A welcome offer arrives with a headline multiplier — trade coverage describes offshore welcome offers as typically 25× to 40× — and a term that the wagering applies to the bonus plus the deposit. On a second look, the small print multiplies: the deposit is now being played through too, effectively doubling or tripling the requirement. Later versions get tighter, not looser, because the funding of the offer has to come from somewhere.
The warning signs are consistent and boring. A maximum cashout clause, such as a cap of 300 per cent of the credited bonus amount with the excess voided. A maximum bet while wagering, sometimes pitched as low as 20 per cent of the deposited amount, with breach punished by forfeiture of the bonus and any winnings generated while wagering it. Wagering contribution charts that award 100 per cent to slots and 20 per cent to table games, so the requirement that looked passable becomes unreachable on blackjack. A "sticky" bonus that can be wagered but never withdrawn. And terms granting the operator sole discretion to void winnings — the exact drafting that cost one British operator £170,000 in July 2025 and formed part of a £900,000 regulatory settlement announced on 21 October 2026.
None of these terms are hidden, strictly speaking. They are simply placed where nobody reads them until it matters.
Five Signs to Check for New Sites
A new site is not automatically a bad one, and an old one is not automatically safe. These five signs separate the two, and each takes under five minutes.
The licence is current and verifiable
Check the licensee, not the badge. The Curaçao Gaming Authority states that clicking a Certificate of Operation Seal must redirect to cert.cga.cw, and that if the certificate behind a seal shows a different domain from the one being accessed, the site is displaying another operator's certificate and should be treated as unauthorised or fraudulent. Anjouan certificates carry a licence number and a QR code linking to a public register. A seal that leads nowhere is decoration.
The withdrawal terms name a deadline and a fee
Look for the sentence that says when a payout is processed and what it costs. British rules forbid a maximum limit on withdrawing the deposit balance — the Commission's own example of a prohibited term is "you may withdraw up to £50 per day and up to £500 per week" — and forbid requiring extra documents at withdrawal that could reasonably have been requested earlier. Offshore, expect the opposite: a processing queue measured in days, a fee, and a verification demand at the point of cashing out. Cost-reflective fees are legitimate; open-ended delay is not.
Payment methods are traceable and the processor is named
The Financial Action Task Force-style language is a giveaway. A site that takes only crypto, or an anonymous e-wallet, or a payment route that leaves no counterparty, is telling you where it expects disputes to end — nowhere. Where an e-wallet is accepted, note that a British-licensed operator must ensure funds were not loaded from a credit card, a rule that does not extend offshore. Prefer a method with a paper trail and a dispute process of its own.
Complaints reach an independent adjudicator
A real licence names an ADR provider in the terms. Anjouan requires its licensees to designate an approved provider and to list it in player-facing terms, with complaints expected to be resolved within 30 days before escalation. Kahnawake employs a full-time Dispute Resolution Officer. If the only route offered is an internal support email with no named adjudicator and no regulator's name attached, treat the licence as marketing copy.
Terms on self-exclusion and account closure are unambiguous
A trustworthy operator states what happens to a balance when an account is closed, and does not tie self-exclusion to forfeiture of deposits. Kahnawake's rules are unusually blunt: a player who breaches a self-exclusion prohibition forfeits funds deposited or won to a charity selected by the Commission. That is harsh, but it is clear, published and consistent — the opposite of a clause written to be argued about later.
How to Vet an Offshore Casino Before Depositing
Five to six steps, each with its reason. All of it is ordinary diligence, none of it requires anything exotic.
- Read the licence page and click the seal. Reason: seals are the most commonly faked element on an offshore site, and CGA and Anjouan both publish verification routes precisely because misuse is routine. If the seal does not resolve to a live register entry for that exact domain, stop.
- Open the withdrawal section of the terms before the bonus section. Reason: payout terms reveal more about an operator's intentions than any welcome offer. Look for processing time, fees, any per-transaction cap, and whether verification is demanded only on withdrawal — the pattern the Commission says generates over a quarter of the complaints reaching its Contact Centre.
- Work out the true wagering requirement, including deposit contribution. Reason: a 30× requirement on bonus alone and a 30× requirement on bonus plus deposit are different products. Multiply the multiplier by the correct base and the offer either stays plausible or falls apart.
- Check where customer funds sit and whether they are segregated. Reason: segregated funds are not a guarantee — the money can be held overseas, and keeping it separate does not mean recovery on insolvency — but an operator that will not say where player money is held is telling you something.
- Confirm the ADR route and the complaint deadline. Reason: a named adjudicator with a published process is the only realistic path to a disputed balance. Complaint windows are commonly around 12 months from the operator's final response, and ADR bodies will not take a case that has not been through internal complaints first.
- Decide the method and the limit before the first deposit. Reason: limits set in advance are the only ones that hold. On a British site a financial limit prompt is a licence requirement — it must be the default option since 31 October 2025 — while offshore it is something the player imposes personally, or not at all.
Understanding the Legal Offences of Unlicensed Sites
Here the law is worth reading precisely, because both sides misquote it. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and it is immaterial whether the facilities are provided wholly or partly by remote communication, or inside or outside the UK. The offence attaches to the operator, and it applies where at least one piece of remote gambling equipment is in Great Britain, or where the provider knows or should know the facilities are likely to be used here. On summary conviction it carries up to 51 weeks' imprisonment, a level 5 fine, or both.
The Commission states plainly that it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where the operator holds a licence elsewhere. Anjouan Gaming said as much itself on 10 June 2026: an Anjouan licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world", and no licensing authority can exempt an operator from local law where local authorisation is required.
That is a licensing offence aimed at the operator. Adult players who use such a site are not committing an offence under section 33. But they are also, in the Commission's own terms, gambling outside every protection the British system provides — a distinction that is legally narrow and practically enormous.
Why "Best" Is the Wrong Word for Offshore Casinos
"Best" is the wrong word for a market that cannot be compared on the axis that matters. A comparison of British-licensed operators can lean on published withdrawal data, a 10× wagering cap, a 24-hour customer-base check against the register and a named ADR provider. None of that is available offshore in comparable form. What is left is a set of proxies: licence verifiability, term clarity, payment traceability, complaint routes, and whether the operator's own published documents contradict each other.
On those proxies, the honest answer is a shortlist rather than a winner — jurisdictions with a functioning supervisory authority and published fee schedules, domains that resolve through a live verification register, withdrawal terms with a stated deadline and a stated fee, and a named adjudicator. The sites that fail are easier to identify than the sites that pass, and that asymmetry is itself the finding. There is no offshore operator whose terms are better than a well-regulated British one's; there are only offshore operators whose terms are less bad.
Recent Industry Changes in 2026
Three changes in 2026 matter. The 10× wagering cap and the mixed-product ban took effect on 19 January 2026, having been moved from 19 December 2025 — a delay of four weeks that operators used, predictably, to run the last of the old offers. Curaçao's supplier licensing and registration regime becomes fully mandatory and enforceable from 24 December 2026, ending a two-year transitional period under the LOK, which will push some white-label arrangements out of the market entirely. And the Commission announced on 7 July 2026 that Financial Risk Assessments will arrive in stages, starting with the largest operators at £5,000 net deposits in a rolling 24 hours, down eventually to £1,000 in 24 hours or £3,000 over 90 days for adults over 25.
One further item, easy to miss and worth watching: the Commission made its first referral to Visa in January 2025 following a test purchase on an unlicensed site, and has since made three more covering three separate unlicensed websites. It describes payment-transaction reporting as critical and still early-stage. If that arm lengthens, the offshore payment route — the thing that actually keeps these sites viable for British customers — shortens.
What Goes Wrong, and Where the Help Is
The failures are not exotic. The Commission issued an industry warning notice on 20 January 2025 about games supplied by licensed operators appearing on unlicensed websites, noting that such sites often target people who have self-excluded through GamStop and may have inadequate social responsibility and anti-money-laundering controls. That finding is the one that should decide the question. A site whose business model leans on reaching excluded players has told you what it thinks of its customers.
The rest is arithmetic. Complaint volumes at the Commission's Contact Centre have fallen — with complaints coded "Withdrawals and/or financial transactions" dropping from 2,416 in the year to December 2022 to 1,791 in the year to December 2025 — but withdrawal problems remain the largest single category, and the Commission's Annual Report 2024-25 says as much. Offshore, there is no Contact Centre, no licence condition and no regulator to complain to; the Commission is a regulator, not an ombudsman, and cannot get anyone's money back even on a British site.
Where a licence is genuinely absent, the protections are genuinely absent. Help is still available and it is free: the National Gambling Helpline, run by GamCare, on 0808 8020 133, twenty-four hours a day, every day of the year, with 0808 2819 265 for callers in Wales. Gamblers Anonymous England, Wales and Ulster can be reached on 0330 094 0322, and Citizens Advice Scotland runs a gambling support line on 0800 328 1131, Monday to Friday, 10am to 3pm. Nobody at any of those numbers will ask which site, or whether it had a licence.
FAQ
Do online casinos not on GamStop break UK law?
The operator does, in principle. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and it is immaterial whether those facilities are provided inside or outside the UK. The offence attaches to the provider, not the adult customer. The regulator's practical tools are disruption rather than prosecution: since April 2024 it has issued 3,140 cease and desist and disruption notices.
Why does a site accept British players but hold no UK licence?
Because the licence is expensive and the enforcement is indirect. A British operator pays 1.1 per cent of previous-year gross gambling yield through the statutory levy, commenced 6 April 2025, and accepts identity checks before the first bet, a credit card ban in place since 14 April 2020 and a 10× cap on wagering requirements since 19 January 2026. A Curaçao B2C licence costs EUR 47,450 a year in total. The saving funds the welcome offers.
Are offshore payouts slower than UK ones?
Usually, and there is a benchmark. Commission data for June to September 2024 records 44.2 million withdrawals at large British operators: 96.3 per cent cleared automatically and 0.1 per cent took up to 48 hours. Offshore, expect a processing queue, a verification demand at cash-out and possibly a fee. British rules forbid demanding documents on withdrawal that could reasonably have been requested earlier; that prohibition does not travel with the player.
What is the catch with a 30× wagering requirement?
The base, not the multiplier. A requirement of 30× on the bonus alone is a different product from 30× on bonus plus deposit, and several operators use the second while advertising the first. Then check the contribution chart — slots at 100 per cent, table games at 20 per cent — because a 30× requirement on games that contribute a fifth is really 150×. British operators have been capped at 10× since 19 January 2026.
Can an offshore casino get round a GamStop exclusion?
No, and it is important to be exact. A GamStop registration blocks access to operators licensed in Great Britain, and it stays in place for its full term and afterwards until the person contacts GamStop to remove it. It cannot be cancelled during the exclusion period, and registrations are not removed early. An offshore site simply sits outside the scheme — which is not the same thing as overriding it.
How many people actually use unlicensed sites?
Fewer than the coverage implies. The Commission's analysis published 5 November 2026 found that among respondents who had gambled online in the previous four weeks, 2.5 per cent had engaged with an illegal gambling website and a further 1.5 per cent in the past twelve months. Across the whole population, 94.4 per cent showed no indication of using one. Estimates of the money involved differ enormously, which is its own warning.
The Short Version
Offshore casinos are not a better version of British ones; they are a version with fewer rules and fewer remedies, and the entire calculation comes down to whether a thin rulebook still pays out when it matters.
That is why the British benchmark matters so much. 44.2 million withdrawals in four months, 96.3 per cent clearing automatically — that is what a supervised market looks like in practice. Offshore, the player carries the supervision personally, which is a job nobody should have to do on a Saturday night. And if the gambling has got past that point, the help is free and it does not depend on any licence: the National Gambling Helpline on 0808 8020 133, twenty-four hours a day, and 0808 2819 265 for callers in Wales.
