Gambling Not on GamStop and the Phone and App Reality Offshore in 2026

Gambling not on GamStop means an operator with no Gambling Commission licence, so it sits outside the national self-exclusion scheme and outside every UK protection attached to it. Those sites exist, they take British players, and they answer to another regulator or to none. Nothing about that is illegal for the player.

GamStop is the scheme people mean, not GameStop the games shop. The register holds 614,738 people as of July 2026, and it is checked by every operator licensed in Great Britain. Sites without that licence simply never ask. That is the whole story in one line, and the rest of this page is the detail. The site angle here is narrow and deliberate: what this looks like on a phone, in an app, at half past eleven at night. App stores and mobile browsers are where offshore gambling is found now, and they are also where the warning signs are thinnest. So the checks below are written for the screen in your hand.

The practical facts first, plainly stated. Offshore sites are not licensed in Great Britain. UK protections do not apply. Help comes from the National Gambling Helpline, run by GamCare, free on 0808 8020 133, 24 hours a day, every day, with the Welsh line on 0808 2819 265. A survey published by the Commission on 5 November 2026 estimated that 2.5 per cent of respondents who had gambled online in the past four weeks had engaged with an illegal gambling website. Small. Not nothing.

Nineteen Years of a Licensing Gap

Section 33 of the Gambling Act 2005 makes it an offence to provide gambling facilities without an operating licence. It is in force since 1 September 2007, and the wording is unusual in one respect: it is immaterial whether the facilities are provided wholly or partly by remote communication, and whether they are provided inside or outside the UK. On summary conviction the penalty runs to 51 weeks, a level 5 fine, or both — six months in Scotland.

Note who that offence attaches to. The operator. The Gambling Commission confirmed on 21 October 2024 that it is illegal to offer commercial gambling services to consumers in Great Britain without a Commission licence, and that this includes an operator holding a licence somewhere else. Sections 47 and 49 do the same for children: the offences land on whoever invites or permits. Adult consumers are not the targets of enforcement, and this page has no interest in pretending otherwise.

Since 31 March 2020, all online operators must be part of GamStop as a condition of their licence. The requirement sits in social responsibility code provision 3.5.5 of the Licence Conditions and Codes of Practice: "Licensees must participate in the national multi-operator self-exclusion scheme." In April 2020 the Commission added a duty to check the whole customer base at least every 24 hours. Two operators lost their licences on 3 April 2020 for missing the deadline — Dynamic, one licensee, and Sportito — under section 118(2) of the Act.

That is the fence. Offshore gambling is what stands outside it.

Gambling Sites Not on GamStop and the App Store Question

A British-licensed operator cannot hand you an app that ignores the register. The check runs against every account, every day. An operator outside the scheme can, and does, and on a phone the difference is invisible: the icon looks the same on the home screen, the lobby loads the same way, and the sign-up form asks for an email and a password.

Where the Money Comes From at Gambling Sites Not on GamStop UK

Blocking the payments is the harder job, and the Commission knows it. Since April 2024 its Illegal Markets team has issued 3,140 cease and desist and disruption notices — 2,032 C&Ds, 774 registrar referrals, 402 host referrals and 3 payment provider referrals — and referred 447,778 Bing and Google URLs, securing 287,961 removals. It made its first referral to the Visa Operator Scheme in January 2025 and has since made three more.

The effect is real but partial. Across 160 illegal sites, engagement fell by an average of 32 per cent after disruption. Registrar blocks and suspensions produced the largest average fall in engagement, at 91 per cent each, ahead of GEO IP blocking at 60 per cent, Bing removal at 52 per cent and Google removal at 30 per cent. Facebook removal: 8 per cent. The Commission's own conclusion is that search-engine removal makes a site harder to find without fully blocking it.

Volume tells the same story unevenly. Websites referred to search engines ran 124 in July to September 2024, 321 in April to June 2025, 226 in January to March 2026, then 366 in April to June and 1,835 in July to September 2026. C&D notices in that last quarter: 546. Prosecutions commenced across April 2025 to March 2026: one.

The Economics of Offshore Licensing

Offshore licensing is cheap, which is the reason the sector is crowded. Anjouan charges EUR 17,828 to issue a B2C internet gaming licence and the same again annually, with EUR 500 per extra domain. Curaçao charges a one-time non-refundable EUR 4,592 application fee and a total annual B2C fee of EUR 47,450 — EUR 24,490 to the National Treasury and EUR 22,960 to the Gaming Authority, payable in full by 15 January. Malta's B2C application fee is EUR 5,000, the annual licence fee EUR 25,000, plus 5 per cent gaming tax and minimum paid-up capital of EUR 100,000 for Type 1 and Type 2 licences.

Compare the effort that goes into a British licence and the arithmetic explains the market. It also explains the marketing: offshore casinos cannot compete on protections, so they compete on speed, on bonus size, and on the promise that nobody will ask awkward questions.

The number of such sites is unstable by design. The Commission's illegal gambling dashboard recorded 586 illegal gambling websites accessible to GB consumers in September 2026, 4 per cent more than September 2025, and 311 sites had disruption action taken against them in the second quarter of 2026 to 2027 — 38 per cent more than the previous quarter, with 77 per cent of disrupted sites seeing a reduction in estimated traffic. Across the monitored period of May 2024 to July 2025, just over 1,000 unique illegal gambling websites were accessed by consumers in Great Britain.

Then there is the trade press view of Curaçao, where a third-party read of the public register in November 2026 counted 704 licences held by 698 operators, of which 552 were active. Not a regulator's figure, and I would not lean on it, but the ratio of live to dormant tells its own story about shelf licences.

Read that middle column again. On a British licence, the register tells you whether the domain in front of you matches the licence. Offshore, verification is a certificate you have to chase.

The One Check That Does Not Exist

Every other difference between a British-licensed site and an offshore one flows from this. The Commission's own guidance is that it can only regulate gambling websites which trade or advertise to customers in Great Britain, and those websites must hold a Commission licence. Where there is no licence, there is no condition, no monitoring, no inspection and no sanction.

GamStop is the clearest case. Registration blocks a person from gambling with all online gambling companies licensed in Great Britain for six months, one year, five years, or five years with auto-renewal. Signing up takes minutes; the block can take up to 24 hours to bite. Once registered, a person cannot cancel or deactivate the registration during the exclusion period, and the exclusion stays in place after the end of the chosen period unless they contact GamStop to remove it. Registrations cannot be removed early — the Group's 2025 annual report devotes a section to refusing exactly that.

Auto-renewal is worth understanding properly. Under the terms of use, the auto-renewal option may only be turned off during the final six months of a five-year minimum exclusion period, and auto-renewal continues for up to four new five-year periods. If nothing is deactivated after the chosen period, GamStop holds the data through a further automatic seven-year self-exclusion period, during which operators are told the person was previously excluded. That is the scheme's spine, and it does not bend.

An offshore site has no connection to any of it. The obligation runs to UKGC-licensed operators only — stated in trade and press sources rather than a regulator page, so treat it as reported rather than official, though it follows from GamStop's own terms. And here the industry's own behaviour is the tell. The Commission issued an industry warning notice on 20 January 2025 about games supplied by licensed operators turning up on unlicensed websites available to GB consumers, noting that such sites often target customers who have self-excluded via GamStop.

A self-exclusion holds for its full term and then stays in place until the person contacts GamStop to remove it. An offshore site is not a way round it, whatever the banner says.

The First Time, and Every Time After

The first time anyone signs up at an offshore site, the honesty check is smaller than the compliance check. A British-licensed operator must verify name, address and date of birth before the customer is permitted to gamble, and tell customers before a deposit what documents may be needed. Offshore, the same account may open on an email address and a date of birth typed in without challenge. Under-25s took nearly one in three of all GamStop Online self-exclusions in the first half of 2026, a 26 per cent year-on-year increase — a group for whom an age check that does not happen matters.

Later, the pattern flips. A British-licensed operator can defer full verification to a €2,000 threshold under what the Commission calls the hybrid approach, but licence condition 17.1.1 says a withdrawal request must not trigger a demand for information the licensee could reasonably have requested earlier. LCCP licence condition 7.1.1 requires terms to be fair within the meaning of the Consumer Rights Act 2015. There is no fixed statutory deadline for paying out — the regime leans on fairness, not a stopwatch — but the direction of travel is one way.

Five Signs That Separate a Careful Operator From a Careless One

A Licence You Can Click Through and Match

The check takes thirty seconds. For a Curaçao operator, the Certificate of Operation Seal must redirect to the Curaçao Gaming Authority website; if the seal differs in design, colour or format, the website is not authorised. If the certificate behind the seal shows a different domain from the one being visited, the site is displaying another operator's paperwork. The Curaçao Gaming Authority also warns that a historic /JAZ number or legacy seal is not independent proof of a current licence — those master licensors stopped issuing on specific dates through 2024 and 2025, and legacy "orange" certificates ended on 15 October 2025.

Terms Written for the Player, Not the Lawyer

Since 19 January 2026, British-licensed operators may not apply wagering requirements above ten times on bonus funds and may not mix gambling products within one promotion. The Commission's reasoning is worth quoting in substance: it chose a cap over a ban because it judged licensees would otherwise introduce terms preventing customers cashing out bonuses, and said the limit "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements." Offshore, 25× is ordinary and 35× to 50× is common on welcome offers, with no-deposit bonuses often at 40× to 60× and a cashout cap attached.

A Withdrawal Page Without Traps

Reverse withdrawals have been banned for all remote operators in Britain since 31 October 2021 under RTS 14B: "Consumers must not be given the option to cancel their withdrawal request." Offshore terms are text, and text is where delay gets built in. The Commission's October 2026 action against one operator covered a term stating customers could request only one withdrawal at a time and could not request another until the original was authorised — found unfair under the Consumer Rights Act 2015 — plus manual review of every fifth or tenth withdrawal for some customers, generating extra document demands before processing.

Money Held Separately From the Business

Under LCCP licence condition 4.1.1, customer funds at a remote operator must be kept in a separate client account, and Gambling businesses must pick one of three protection ratings — "not protected", "medium protection" or "high protection" — and say which applies in their terms. Operators rated "not protected" must remind customers every six months that their funds are not protected in the event of insolvency, stating the value held. Anjouan's published standards require operators to segregate player funds, which is a good line on a website and not the same thing as a UKGC insolvency rating.

Somewhere to Take a Dispute That Is Not the Operator

British-licensed operators must offer a free route to a Commission-approved ADR provider if a complaint is unresolved within eight weeks — the list includes IBAS, eCOGRA, CEDR, ProMediate, Pegasus ADR Service, ADR Group, Blexr and the Tattersalls Committee. IBAS handled 3,721 domestic disputes in 2024-25 at an average completion time of 20 days and reports 100 per cent operator compliance with decisions in the consumer's favour in both 2023-24 and 2024-25. eCOGRA's report for October 2024 to September 2025 records 911 disputes received, of which 150 valid ones concerned deposits and withdrawals, an average domestic resolution time of 31 days, and 17.8 per cent of completed disputes ruled for the consumer. Anjouan requires a designated ADR provider, but operators are only expected to resolve complaints within 30 days before a player may escalate — and a ruling is only worth what the operator behind it is worth.

How to Check an Offshore Site Before You Register

1. Read the footer for the regulator's name, then find that regulator's own page. Figures quoted on the operator's site prove nothing. Go to the Curaçao authority's certification policy, or the Anjouan register, and check the domain against what is listed. The reason: a licence certificate is not interchangeable with a Certificate of Operation, and both can be copied.
2. Test the seal or certificate in front of you rather than on the page. Click the seal and confirm where it lands. A QR code should resolve on the public register. The reason: the failure mode is not a missing certificate, it is a certificate belonging to somebody else.
3. Read the withdrawal section before you read the bonus section. Look specifically for a limit on the number of withdrawals at a time, a fee schedule, a pending-period clause and any clause giving the operator discretion to void winnings. The reason: the Commission's own figures show withdrawals are the single biggest source of consumer complaint, at around 2,000 a year by July 2024.
4. Check whether the site blocks anyone at all, and how. If terms describe a self-exclusion facility, note the term length, whether it is permanent, and what happens if the person plays anyway. Kahnawà:ke, for instance, makes its voluntary self-exclusion permanent and irrevocable and forfeits funds deposited or won in breach to a third-party charity. The reason: a self-exclusion a player can simply abandon is marketing, not protection.
5. Look at the payment methods and ask what a failed withdrawal costs. A bank gambling block can be a useful wall, and the Commission's list of banks offering one — last updated 16 October 2026 — names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling. It is applied at card level, so it must be switched on for each card, and most banks impose a 48 or 72-hour cooling-off period before gambling transactions clear again. The reason: a block that covers card payments catches some offshore sites and misses the ones taking crypto.
6. Time the first withdrawal small, and time it. A modest test withdrawal before the balance grows tells a player more about an operator than any review page. Some offshore terms void winnings where a bet exceeded the maximum allowed during wagering — commonly €5 for regular players and €10 for VIPs at one operator, or 20 per cent of the deposit at another — and enforcement of that clause is decided by the operator alone.

What the Payout Numbers Actually Show

Withdrawals are where the gap between regulated and unregulated shows up in arithmetic, so here is the arithmetic. Gambling Commission data covering June to September 2024 records 44.2 million withdrawals by customers of large online operators. Of those, 96.3 per cent cleared automatically, 3.5 per cent within 24 hours and 0.1 per cent up to 48 hours. Earlier data from some of the largest companies showed around 99 per cent of withdrawal requests approved, processed and fulfilled within 24 to 48 hours.

Consumer sentiment is less flattering than the processing figures. Research published 23 July 2026 found 49 per cent of people who had gambled in the past 12 months agreed it is quick and easy to withdraw and collect winnings, 33 per cent were neutral and 18 per cent disagreed. Complaints to the Commission's Contact Centre coded "Withdrawals and/or financial transactions" fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025. Over a quarter of complaints reaching the Contact Centre concern identity verification, raised when documents are demanded only at the withdrawal stage — and that is the pattern to watch for offshore too, because it is the same trick in a site with nobody to complain to afterwards. The Commission's Annual Report 2024-25 says issues relating to withdrawals remain the cause of most of the complaints it receives.

This is where the phone matters. An app that holds a balance, remembers a card and reduces a withdrawal to two taps makes the deposit frictionless and the exit invisible. Nobody sees a pending state they cannot cancel.

The Welsh, the Apps and the Rest of the Map

Cluster phrases keep this page honest, so: what gambling sites are not on GamStop is a question with no stable answer, because the list changes weekly. App stores are the same story — an app removed for a policy breach reappears as a web shortcut on a home screen within days.

Welsh gambling sites not on GamStop is a phrase with no separate market behind it. The scheme is national, and the helpline number for callers in Wales is 0808 2819 265 against 0808 8020 133 for England and Scotland. Land-based provision differs in its paperwork rather than its coverage: SENSE is the scheme for licensed land-based casinos, with a minimum six months extendable to twelve from the enrolment date and removal only in person at a casino during a six-month "Thinking" period, followed by a 24-hour cooling-off. The Commission's May 2026 FOI response put active SENSE customers at 12,445 between 1 April 2025 and 1 April 2026. GamStop Betting Shops, formerly MOSES, is telephone-based on 0800 294 2060, excludes a customer from shops in the areas they name for a fixed twelve months that cannot be ended early, works with over 60 operators and covers roughly 6,000 shops, with 9,075 active exclusions in the same period.

Multi-operator self-exclusion in Britain is thorough. It is also strictly licensed. The gap that offshore gambling occupies is the gap between those two sentences.

Questions About Offshore Gambling

What gambling sites are not on GamStop?

Sites holding no Gambling Commission licence are not in the scheme. Some are legal operators in their own jurisdictions, licensed in Curaçao, Anjouan, Malta or Kahnawà:ke. Others hold nothing worth calling a licence: Costa Rica has no comprehensive gambling licensing regime at all, and the "data processing license" sometimes referenced there is not a licence in the strict legal sense. The only reliable test is the Commission's public register.

Are gambling companies not on GamStop legal in the UK?

The illegality attaches to the operator, not the player. Section 33 of the Gambling Act 2005 makes it an offence to provide gambling facilities without an operating licence, carrying up to 51 weeks' imprisonment, a level 5 fine, or both, and it applies whether facilities are provided inside or outside the UK. The Commission confirms that operating in Britain without a Commission licence is illegal even where the operator holds a licence elsewhere.

Does an offshore site know about my self-exclusion?

No, and that is the point of the register. Registration blocks gambling with all online companies licensed in Great Britain, checked daily, and the exclusion cannot be cancelled or deactivated during its term. It holds for the full period and then stays in place until the person contacts GamStop to remove it. An operator outside the scheme has no access to the register and no obligation to look.

Are withdrawal speeds better at gambling apps not on GamStop?

Not as a category, and the comparison is often rigged. British-licensed operators cleared 96.3 per cent of 44.2 million withdrawals automatically between June and September 2024. Offshore, a smaller operator may pay in minutes or may hold a balance through manual review — the Commission fined one operator in October 2026 over a term allowing only one withdrawal at a time. Speed is a marketing claim until it has happened twice.

Which payment method gives the least room for delay?

Bank transfer through Faster Payments has a £1 million scheme ceiling per transaction, though individual banks set lower limits, and over 90 per cent of transactions complete in under two seconds. That is the cleanest rail in Britain. Crypto settles on its own terms: Bitcoin targets an average ten minutes per block, and a transaction is unconfirmed until it is six blocks deep in the classic client.

Is it safe to use gambling sites UK not on GamStop on a phone?

Safety is a legal question, not a technical one, and the answer is that the protections do not travel with the screen. British-licensed operators must keep customer funds in a separate client account and publish an insolvency protection rating; over a quarter of Contact Centre complaints concern identity checks demanded at withdrawal. Apps make the deposit easy and hide the pending withdrawal. Check the licence first.

How much money goes to unlicensed operators?

Estimates range widely because the activity is hidden. Market-intelligence firm H2 Gambling Capital estimated stakes with illegal operators reached £16.6 billion in 2025, up from about £5 billion in 2019, with the legal share falling from 97 per cent to 92 per cent. A Commission analysis published 5 November 2026 found 0.6 per cent of all respondents had engaged with an illegal gambling website in the past four weeks.

Gambling Not on GamStop Explained

The offshore market exists because a licence costs a great deal in Britain and very little elsewhere, and because a phone makes the difference between the two impossible to see. What is lost is not speed or bonus size — it is the register, the customer-funds rule, the fair-terms condition and a free route to a dispute decision that somebody else enforces. The betting industry's own regulator reckons around 586 illegal websites were reachable from Great Britain in September 2026. For help, the National Gambling Helpline is free on 0808 8020 133, 24 hours a day, every day.

Article last reviewed: 7 November 2026.