New Casinos Not on GamStop and the Phone-First Reality

A new casino not on GamStop is an offshore site holding no Gambling Commission licence. It cannot join the UK's self-exclusion register and is not obliged to. Such a site is legal for the operator to run from abroad but illegal to offer to British consumers, and none of the UK's protections follow it.

New casinos not on GamStop arrive on a phone before they arrive anywhere else. A site can be built now for a few thousand euros in licence fees, wrapped in an app that installs from a browser link rather than a store, and advertised to people whose accounts at British-licensed operators have been closed by a self-exclusion they cannot lift. The register holds 614,738 consumers as of July 2026, and more than one in two chose the maximum five-year term. That is a large, known, permanently identifiable audience — the exact audience an unlicensed operation wants.

The app part matters more than it used to. A web app in a browser tab is invisible to the app stores that vet gambling software, and it can be pointed at whatever domain name survives the week. The Gambling Commission's Illegal Markets team referred 1,835 websites to search engines in July to September 2026, and issued 546 cease and desist notices in the same quarter. Domains burn; the app is reinstalled from a fresh link. So the question for anyone weighing a new site that sits outside the register is not whether it works nicely on a phone — it is who holds the licence, what the terms actually say about money, and what happens when both go wrong. This page goes through all three, in that order.

The Promise, the Price and the Plate of Evidence

The phrase "new casino not on GamStop" is sold on a promise of two things: novelty and freedom. The novelty is mostly a domain name. The freedom is real, and it is the only part that costs money.

Here is the arithmetic of a new casino not on GamStop from the licensing end, because that is where the marketing stops. A Curaçao B2C licence costs a one-time non-refundable application fee of €4,592, with €150 per ultimate beneficial owner and €150 per qualified interest holder, and a total annual fee of €47,450 — €24,490 to the National Treasury and €22,960 in supervisory fees, payable in full by 15 January. An Anjouan B2C licence is €17,828 to issue and €17,828 a year, with €500 per additional domain or URL. Malta's authority charges €5,000 to apply, €25,000 a year, and requires €100,000 in paid-up share capital for a Type 1 or Type 2 B2C licence.

The second figure on that list should stop a reader cold. Anjouan's annual fee is roughly 15 per cent of Malta's application fee, and it covers an unlimited number of brands at a modest price per domain. Regulation is priced like everything else in this business, and a jurisdiction that charges a fraction of a rival's fee is not buying the same product.

The plate of evidence is thinner than the marketing implies. An independent legal opinion dated 19 September 2024 and reconfirmed in February 2026 by a firm regulated in England and Wales and in Quebec is reported to confirm that Anjouan's Offshore Financial Authority is the lawful gaming regulator there. That is the licensee's own statement, and it is unconfirmed. Against it sits an ABC News investigation published on 31 December 2025 which reported that a former attorney-general of the Comoros called the licensing operation "an illegal entity", and that the authority was stripped of recognised-regulator status by Comorian banking laws passed in 2013 and 2015. Anjouan Gaming itself said in a statement on 10 June 2026 that an Anjouan licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world". Quite so. No licence is.

That is the sting in the whole category: the sites most keen on telling British players how free they are are the same sites whose own regulator disclaims any duty to police where that freedom is exercised.

One Benchmark, and What It Actually Measures

For a page about new sites, the sensible benchmark comes from the regulator that measures the market nobody wants to be measured in: the Gambling Commission's enforcement data on illegal operators. Its figures cover the period since April 2024 and were published on 21 October 2025 and updated in March 2026.

Since April 2024 the Commission's Illegal Markets team has issued 3,140 cease and desist and disruption notices — 2,032 cease and desist notices, 774 registrar referrals, 402 host referrals and 3 payment provider referrals. Over the same period it referred 447,778 Bing and Google URLs and secured 287,961 removals. Across 160 illegal gambling websites for which traffic data existed, engagement fell by an average of 32 per cent after disruption.

The interesting number is not the total. It is the breakdown by method. Registrar blocks and website suspensions produced the largest average fall in engagement — 91 per cent each — ahead of GEO IP blocking at 60 per cent, Bing removal at 52 per cent, Google removal at 30 per cent and Facebook removal at 8 per cent. The Commission says plainly that GEO IP blocking and registrar blocks work better than search-engine removal, because taking a result out of an index makes a site harder to find without blocking access to it.

Read that against the app in the browser tab. The disruption that hurts an offshore site most is the one aimed at the domain and the hosting, not the one aimed at the search result. A site that lives in an installed app, draws its traffic from social channels and rotates domains is optimised against exactly the enforcement methods that demonstrably work. The model is not careless. It is designed.

Where the Licence Sits, and Why It Matters

British-licensed sites set the comparison, so start with what that licence obliges an operator to do. Since 31 March 2020 every online gambling operator must be part of GAMSTOP as a condition of its Gambling Commission licence, under social responsibility code provision 3.5.5: "Licensees must participate in the national multi-operator self-exclusion scheme". Since April 2020 operators must also check their entire customer base against the register at least every 24 hours. Sites that failed to integrate — Dynamic and Sportito — had their licences suspended on 3 April 2020. The obligation is not decorative.

Offshore, the same question has a different answer, and the answer varies enormously.

Malta

The Malta Gaming Authority is the closest thing offshore has to a like-for-like comparison, because its regime is a full one. A B2C licence is required whenever a Maltese or EU/EEA entity offers a gaming service from Malta, to a Maltese person, or through a Maltese legal entity. Fees are €5,000 to apply, €25,000 a year, plus gaming tax of 5 per cent of gaming revenue, and minimum paid-up share capital of €100,000 for Type 1 and Type 2 B2C licences. The authority also publishes a list of Unauthorised URLs, declaring it has no connection with those domains and that references to the MGA on them are false and misleading, with the most recent entries carrying notice dates of 30 October 2026. A regulator that publishes a blacklist of people impersonating it is a regulator doing the job.

Curaçao

Curaçao has genuinely rebuilt its regime. The National Ordinance on Games of Chance took effect on 24 December 2024, making the Curaçao Gaming Authority the direct licensing and supervisory authority, and the old master-licence and sub-licence model was scrapped. The four former master licensors stopped issuing: Gaming Curaçao on 18 August 2024, Curaçao eGaming on 1 October 2024, Antillephone on 1 November 2024 and Curaçao Interactive Licensing on 31 January 2025. Provisional licences granted by operation of law ran to 24 June 2025, were extended to 24 December 2025, and operators had to be fully compliant by then to qualify for a full licence.

The problem is the artefacts of the old system. The legacy "orange" sub-licence certificates of operation ended on 15 October 2025, and operators should no longer rely on the former orange certificate as proof of a current licence. A historic /JAZ number or legacy seal must not be treated as independent proof that an operator holds a valid CGA licence. And in October 2026 the CGA announced that its previous online gaming portal would not return to service and that the previous digital licence seal may be affected by the transition, while it works on an alternative way to verify licensed domains. Supplier registration becomes fully mandatory from 24 December 2026.

So a new offshore site waving a Curaçao seal at a phone screen is showing something that may be a live certificate, a transitional one, a legacy orange one, or a decorative image. The CGA's own policy says a Certificate of Operation Seal must redirect to the official verification portal, that a seal differing in design, colour or format is not authorised, and that if the certificate behind the seal names a different domain from the one being viewed, the site is displaying another operator's certificate and should be treated as unauthorised or fraudulent.

Anjouan

Anjouan regulates under the laws of the Autonomous Island of Anjouan, a constituent territory of the Union of the Comoros, on a framework founded on 2005 legislation including the Anjouan Computer Gaming Licensing Act. The Anjouan Gaming Authority names the Anjouan Offshore Financial Authority as the competent regulator, with Anjouan Licensing Services Inc. as sole authorised licence administrator and official representative. Licences come in B2C and B2B forms covering casino, sports betting, poker and bingo. Its published standards require operators to segregate player funds, use random number generators certified by an approved independent testing facility, and apply AML and age verification. Certificates carry a unique licence number and a QR code linking to the public register, and certificates that cannot be verified through that register should not be relied on as evidence of licensing status. Its ADR providers are EGIS ADR, Axion ADR, iGaming ADR and another approved entity, and operators are expected to resolve complaints within 30 days before a player escalates.

On paper this is a framework. It is also the jurisdiction whose own regulator told the trade press in June 2026 that a licence is not a universal authorisation, and whose licensing entity a former Comorian attorney-general called "an illegal entity" in a December 2025 investigation. Both things are true at once, and both belong in the balance.

Kahnawake

The Kahnawà:ke Gaming Commission was established in 1996 and enacted its interactive gaming regulations on 8 July 1999, and describes itself as having regulated interactive gaming longer than almost any other jurisdiction. Its structure is unusual: it issues a single Interactive Gaming Licence, held by one entity at a time and held by Mohawk Internet Technologies since 1999, plus Client Provider Authorizations that let operators offer casino, poker and sportsbook. Licensed operators must be hosted at Mohawk Internet Technologies, a data centre in the Mohawk Territory managed by Continent 8 Technologies. There is a Logo Certificate Program, effective 15 January 2010, that lets a player click the Commission's logo and generate a "Certificate of Good Standing".

The Commission also has teeth that will surprise anyone who assumes offshore means toothless. Kahnawake requires a licensee's relationship with players to be contractual and free of unfair or unreasonable terms, requires sites to let a player set limits including zero, and states that its own voluntary self-exclusion is permanent and irrevocable. A player who breaches a self-exclusion prohibition forfeits any funds deposited or won to a third-party charity chosen by the Commission, and there is a full-time Dispute Resolution Officer. Costs are rising there too — from 1 January 2027 the Client Provider Authorization application fee goes from USD 35,000 to USD 40,000 and the five-year renewal from USD 5,000 plus the annual fee to USD 40,000 including it, though the annual CPA fee stays at USD 20,000. On 6 October 2026 the Commission suspended the CPA held by Polar Ventures SDRL with effect from 29 September 2026 following a show cause notice. Suspensions happen. That is the point of a regulator.

Costa Rica, and the Absence of a Regime

Costa Rica does not operate a comprehensive gambling licensing regime and has no formal framework for issuing gambling licences. The "data processing license" sometimes cited in the trade is not a licence in the strict legal sense. The Legislative Assembly rejected Bill No. 25,057 in early 2026, which would have introduced mandatory licensing and addressed unlicensed and offshore operations. Under Costa Rican law, games whose outcome depends primarily on luck rather than skill are generally prohibited — only land-based casinos integrated into qualifying hotels are authorised. A site claiming a Costa Rican licence is therefore most likely claiming a document that does not exist.

Offshore Without the Illusions and How Delay Is the Product

The single term that separates a decent offshore operation from a bad one is time. Not the marketing promise of speed, but the rules that let an operator hold money after a player has asked for it.

The UK's position is unusually explicit, and worth stating because it is the yardstick. Licence condition 17.1.1 requires that a request to withdraw funds must not result in a requirement for additional information if the licensee could reasonably have requested that information earlier — the "we need your documents now" manoeuvre is a breach, unless another legal obligation such as anti-money-laundering rules genuinely requires the information at that moment. Licence condition 7.1.1 requires terms and consumer notices to be fair within the meaning of the Consumer Rights Act 2015. Reverse withdrawals have been banned outright since 31 October 2021 under RTS 14B: "Consumers must not be given the option to cancel their withdrawal request." And no term may impose a maximum limit on what a consumer may withdraw from their deposit balance — the Commission's example of a prohibited clause is "You may withdraw up to £50 per day and up to £500 per week".

Offshore, none of that applies. What appears instead is a family of clauses that build delay into the product.

BlueChip Casino's terms reserve the right to limit the amount withdrawable from winnings generated with bonus funds, including free spins and cashback, to 300 per cent of the credited bonus amount, with any excess voided. Ignition Casino states that casino bonus amounts are subject to a 25× wagering requirement before any winnings derived from such bonuses may be withdrawn, and that where a deposit is made while a no-deposit bonus is active, the wagering requirements and maximum allowed cash-out of the no-deposit bonus still apply. It also says free bonuses are not to be redeemed consecutively, and that redeeming two or more no-deposit bonuses in a row can result in removal of subsequent winnings. Each of those clauses is legal where the operator is licensed, and each one is a mechanism for a withdrawal not happening.

The first time a player meets such a term is usually on the way out, not the way in. The bonus is credited in seconds; the playthrough chart appears afterwards. Ignition's published contribution chart gives slots and specialty games 100 per cent, table games 20 per cent, video poker and blackjack 10 per cent, roulette and baccarat 5 per cent, and craps, Hot Drop Jackpots and live dealer games 0 per cent unless stated otherwise. A player who takes a 25× bonus and spends the evening at live dealer tables has contributed nothing at all towards clearing it, and the terms said so all along — one click away, in the place nobody reads.

The Wagering Cap Britain Imposed, and Why It Matters Here

From 19 January 2026 the UK capped wagering requirements on bonus funds at ten times, under social responsibility code 5.1.1, and banned mixed-product promotions that require two or more types of gambling. The Commission's reasoning is the candid part: it said the limit "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements". Mixed offers were banned in the same sweep — "Bet £5 and get £10 free bet" is compliant because it does not mix product types between the initial activity and the prize, while "Bet £5 to get 20 free spins" is not.

The British rules also ended the practice behind sticky bonuses. LCCP guidance requires that wagering requirements must not apply to any play by a consumer with their deposit balance, that deposit and bonus balances must always be displayed separately, and that players must be allowed to withdraw their deposit balance at any time, including when a bonus is pending or active. Offshore, a sticky bonus can still be used for wagering while the bonus amount itself is never withdrawable and is removed on cash-out.

The enforcement history is worth having in mind, because it shows the direction of travel. One operator was fined £170,000 in July 2025 for failures including a bonus term stating that "Fafabet have the right at their own discretion to close accounts or forfeit winnings". In October 2026 another operator agreed a £900,000 payment in lieu of a financial penalty, including a breach of licence condition 7.1.1 relating to terms on gambling offered between October 2024 and October 2025. Sole-discretion clauses cost money in Britain. There is no one to send that bill to offshore.

A Phone in the Hand and Method by Method

The table below compares the routes by which a new site can be reached and paid, by method rather than brand, with the figures that decide how quickly money moves.

Two rows deserve a second look. The first is the debit-card row: UK rules require licensees to accept payment from Great Britain customers only by a method whose provider is a payment service provider within the Payment Services Regulations 2017, under licence condition 5.1.2, effective 31 January 2024. Since 14 April 2020 credit cards have been banned for gambling altogether, under licence condition 6.1.2, and operators must ensure that money arriving from an e-wallet was not loaded from a credit card. On the Commission's data covering June to September 2024, of 44.2 million withdrawals by customers of large online operators, 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours and 0.1 per cent took up to 48 hours. When a UK-licensed operator says fast, there is a number behind it.

The second is crypto. Bitcoin's protocol targets an average interval of 10 minutes between blocks, but a block is not guaranteed to arrive in 10 minutes: within any 10-minute window the probability of a block being found is about 63 per cent, rising to 95 per cent within 30 minutes and 99.7 per cent within 60 minutes. Most exchanges and merchants who bear double-spend risk require six or more confirmations. Ethereum's fee is units of gas multiplied by base fee plus priority fee, charged whether the transaction succeeds or fails, and gas consumed by a transaction that then reverts is still charged. On TRON, sending USDT always consumes Energy because it is a smart-contract call, and MetaMask advises that if an account lacks sufficient Energy, TRX is used automatically, and that a transfer can fail outright if the account has neither Energy nor enough TRX.

That is the honest version of "instant crypto casino". The chain is quick and it is not polite about fees, and a failed transfer is a failed transfer.

Who Is Asking, and Why It Is Asked Late

The thing this whole topic turns on is identity verification: who is asking, when, and whether the timing is a control or an ambush.

In the UK the timing is prescribed. Licence condition 17, introduced on 7 May 2019, requires licensees to obtain and verify information establishing a customer's identity before that customer is permitted to gamble, and that information must include the customer's name, address and date of birth. Before permitting a deposit, licensees should tell customers what types of identity documents or information they may need to provide, in what circumstances and in what form. Companies can often verify identity by matching the account against databases such as credit reference agencies and the electoral roll, in which case no documents are needed at all; where documents are wanted, the Commission's examples are passports, driving licences and household bills. A business may ask for a selfie where it suspects fraudulent activity, such as identity theft where an account was opened in someone else's name, and may obtain bank statements to check that a source of funds is legitimate.

The first time, then, is usually frictionless — a name, an address, a date of birth matched against a database in the background. Later is where it changes. Anti-money-laundering rules bite at a threshold: in remote casinos, identification and verification are required when a customer deposits funds to take part in remote gambling, or withdraws such funds or winnings, amounting to €2,000 or more, and the threshold applies both to a single transaction and to transactions that appear to be linked. Transactions are linked if they are carried out by the same customer through the same game or in one gaming session, or remotely if they form part of the customer's overall activity during a single logged-on period. A remote casino may identify customers and verify their age at registration while deferring full identity verification until the threshold is triggered — the Commission calls this the hybrid approach — and where an operator runs a shared wallet across casino and other products, the checks apply only when the customer first enters the casino part of the site and deposits money. Casinos using the threshold approach must be able to end the transaction with a customer who reaches the threshold if they cannot comply.

That is the sensible reading of the rule, and it is also where operators get it wrong. The Commission's blog of 12 August 2026 reported that over a quarter of complaints reaching its Contact Centre concern identity verification, a concern customers raise when they are asked for documents only on attempting to withdraw. It also warned about "fuzzy matching" through third-party verification providers — onboarding customers on partial or equivocal verification — and noted that onboarding with a middle name instead of a forename can create mismatches with records held elsewhere, such as GAMSTOP, undermining the effectiveness of self-exclusion. That last point is the quiet one. A sloppy identity check does not just annoy a player; it can put someone back into gambling while an exclusion is live.

The warning signs are consistent. Documents demanded for the first time at withdrawal. A request that arrives after a significant win rather than before a deposit. A term reserving the operator's "sole discretion" to void or withhold winnings. A demand for source-of-wealth paperwork on an account that has been running for months without a query. The Commission does not consider it fair, transparent or necessary to delay or prevent withdrawals purely for customer-interaction purposes, and where an operator has no regulatory concerns about a customer it says there is no valid reason to delay a payout.

Offshore, the same machinery exists without the same brake. There is no licence condition 17 offshore and no fair-terms condition 7.1.1, but there is a published document list, a processing queue and a support inbox. The Gambling Commission states it cannot provide a timescale for ID checks because the length of the process varies, which is unhelpful enough with a UK licence behind it and considerably worse without one.

Five Signs It Is Worth Trusting

Trust is not a feeling about a website's design. It is a set of checkable things, and the checks take minutes.

The Licence Is Real, Current and Names the Domain

Start with what the site claims and verify it at source. A Curaçao Certificate of Operation Seal must redirect to the official verification portal, and if the certificate behind it names a different domain from the one being viewed, that is another operator's certificate. A seal differing in design, colour or format is not authorised. A legacy /JAZ number or orange certificate proves nothing, since those certificates of operation ended on 15 October 2025. Kahnawake's logo generates a "Certificate of Good Standing" on a click. Anjouan certificates carry a licence number and a QR code linking to the public register, and one that will not verify should not be relied on. The Gambling Commission's own advice is to click through to its public register and check whether the site's activities and domain names match. If no register produces a live entry for the exact domain, the licence is a graphic.

Money Is Held Separately, and the Site Says What That Is Worth

In the UK, customer funds must be kept in a separate client bank account or accounts and the business must select one of three protection ratings — "not protected", "medium protection" or "high protection" — state which applies in its terms, and, if rated not protected, remind the customer every six months that their funds are not protected in the event of insolvency, stating the value held. That disclosure must be in writing and acknowledged before funds may be used for gambling. Keeping funds in a separate account does not mean customers get them back on insolvency, and gambling businesses may legally hold customer money in overseas bank accounts. What a site is willing to write down is the test. A wall of silence on the point is an answer.

The Withdrawal Terms Are Short and Readable

The good terms are brief. No maximum withdrawal limit. No single-withdrawal-at-a-time clause. No waiting period between requests. For contrast, the £900,000 L & L Europe settlement announced on 21 October 2026 covered a term stating that customers could request only one withdrawal at a time and could not request another until the original was authorised, found unfair under the Consumer Rights Act 2015, plus manual review of every fifth or tenth withdrawal for some customers that led to extra information being required before withdrawals were processed. That is what manufactured friction looks like in paperwork. A site that needs six screens to explain when it will pay has already told the reader something.

Complaints Go Somewhere Independent and Free

LCCP social responsibility code 6.1.1 requires licensees to have arrangements for customers to refer any dispute to an ADR entity free of charge if it is not resolved within eight weeks of receipt, and a consumer must have gone through the operator's own complaints procedure first; the operator may issue a deadlock letter. In Britain the approved providers are ADR Group, Pegasus ADR Service, CEDR, eCOGRA, IBAS, ProMediate and the Tattersalls Committee, and IBAS and eCOGRA have historically handled most gambling disputes. The numbers behind the service are not encouraging to delay: eCOGRA's report for 1 October 2024 to 30 September 2025 records 911 disputes, of which "Deposits & Withdrawals" accounted for 150 valid disputes, an average domestic resolution time of 31 days, and 17.8 per cent of completed disputes ruled in favour of the consumer. IBAS's 2024-25 report records 3,721 domestic disputes, 217 of them categorised as banking and financial disputes, with an average domestic completion time of 20 days and 100 per cent operator compliance with decisions in the consumer's favour in both 2023-24 and 2024-25. Offshore, the named ADR provider matters: Anjouan-approved providers are EGIS ADR, Axion ADR, iGaming ADR and another approved entity, and a site that cannot name one has not agreed to anything.

An Exclusion Is Treated as a Fact, Not a Negotiation

An exclusion holds for its full term, and it stays in place after the end of the chosen term unless the person contacts GamStop to remove it. That is not a marketing line; it is how the scheme works. Registering blocks access to gambling with all online operators licensed in Great Britain for six months, one year, five years, or five years with auto-renewal, and the registration cannot be cancelled or deactivated during the exclusion period. Auto-renewal may only be turned off in the last six months of a five-year minimum exclusion period, and if the registration is not deactivated after the chosen period, GamStop holds the data through a further automatic seven-year period during which operators are told the person was previously excluded. GamStop registrations are not removed early, and the Group's 2025 annual report devotes a section to its refusal to do so.

A trustworthy operator anywhere treats that as settled. A site that advertises itself as a way round an exclusion — and the Commission issued an industry warning notice on 20 January 2025 about casino games supplied by licensed operators appearing on unlicensed websites available to GB consumers, noting that such sites often target customers who have self-excluded via GAMSTOP — has told the player what it thinks of the player's interest before a single bet is placed. An offshore site is never a legitimate route round an exclusion, and anything implying otherwise is a sales technique with a known victim.

How to Check a New Site Before Depositing a Penny

Five or six ordinary steps, each with the reason it earns its place.

1. Find the licence on the regulator's own register, not the site's footer. Follow the seal from the site to the authority's domain — the Curaçao seal must land at the official verification portal — and confirm the certificate names the exact domain being viewed. If it names a different one, close the tab: the site is displaying another operator's certificate. The reason is simple: seals are images, and images are copyable.
2. Read the withdrawal section of the terms before the bonus section. Look specifically for a maximum withdrawal limit, a one-withdrawal-at-a-time clause, a processing window measured in working days and any discretion to void winnings. Britain prohibits maximum withdrawal limits on deposit balance and treats sole-discretion voiding clauses as unfair, so their presence tells you which side of the line a site sits on.
3. Write out the bonus arithmetic before accepting anything. Multiply the bonus by the wagering requirement and check the game contribution chart. A 25× bonus cleared only on slots, where live dealer and craps contribute 0 per cent, is a different proposition from a 25× bonus with broad contributions. Then check for a maximum cash-out multiplier, such as 300 per cent of the bonus amount. The number that matters is what actually leaves the account.
4. Confirm whether the site accepts a self-exclusion it cannot influence. Check whether the operator participates in any multi-operator scheme it names, and treat any suggestion that an exclusion can be worked around as a statement of intent. Under licence condition 3.5.5, British operators must participate, and the register is checked at least every 24 hours; a site outside that system is outside it by choice.
5. Test the dispute route before there is a dispute. Find the named ADR provider and read its eligibility rules — a provider may refuse a dispute where the website is not on its approved list, where at least two weeks have not passed, or where the dispute arose more than a year ago, and providers generally may require submission within not less than 12 months of the operator's notice that it could not resolve the complaint. A provider that cannot be named is a provider that cannot be used.
6. Set a bank-level block and a limit that does not depend on the site. Bank gambling blocks decline payments to merchants categorised under gambling Merchant Category Codes and are applied at card level, so each card must be activated separately. Most banks use a cooling-off period of 48 or 72 hours before gambling transactions are allowed again once a block is switched off, and blocks do not affect a credit score. Banks on the Commission's list, last updated 16 October 2026, include Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling. Since 31 October 2025 every British gambling business must also prompt customers to set a financial limit before their first deposit and remind them to review account and transaction information every six months — a prompt offshore sites are not required to give.

If the checks come out clean, a decision is at least an informed one. If they do not, no amount of app polish changes the answer.

Who Helps When It Goes Wrong

The help is British, free and undisguisedly unromantic about the category.

The National Gambling Helpline is operated by GamCare on 0808 8020 133, free of charge, 24 hours a day, every day of the year, and the same number reaches the Helpline by live chat and WhatsApp, though WhatsApp is mobile only. Callers in Wales are given 0808 2819 265 alongside 0808 8020 133 for England and Scotland. It is not a crisis line: staff cannot transfer callers at immediate risk to another service and instead follow their own safeguarding procedures. BeGambleAware is the public-facing brand of the charity GambleAware, which directs people to the same number or to online chat.

Beyond the helpline, GamFam is a registered charity, number 1191139, set up by people affected by the gambling of family members and friends, delivering support through GRA5P, a structured five-stage peer-support programme, with meetings run remotely and usually six to ten members per group. Gamblers Anonymous England, Wales and Ulster can be reached on 0330 094 0322 and runs around 250 meeting locations across England, Wales and Northern Ireland with no appointment needed, with its line open 7.30am to 10.30pm daily. Gam-Anon UK & Ireland supports the family and friends of compulsive gamblers whether or not the gambler attends GA. The NHS National Gambling Clinic at 69 Warwick Road, London SW5 9HB, telephone 020 7381 7722, accepts self-referrals and professional referrals for young people aged 13 to 18 anywhere in England and for adults aged 18 or over in Greater London and the South East. Citizens Advice offers free confidential advice including help with debt, and Citizens Advice Scotland runs a gambling support service advice line on 0800 328 1131, Monday to Friday, 10am to 3pm.

Two structural facts are worth knowing, because they explain why offshore money is hard to retrieve. The Gambling Commission is a regulator and not an ombudsman, so it cannot resolve individual complaints or help consumers get their money back, though it records all complaints and typically refers disputes to an independent third party. And the Commission's remit only allows it to regulate gambling websites which trade or advertise to customers in Great Britain, which means those sites must hold a Commission licence — a site with no such licence sits outside the regulator's reach entirely, and so do the people who trusted it.

The statutory framework does at least fund the help. The statutory gambling levy, introduced by the Gambling Levy Regulations 2025 and commenced on 6 April 2025, charges 1.1 per cent of previous-year Gross Gambling Yield from all online operators and all software licences, rates running from 0.1 per cent to 1.1 per cent depending on licensed activity. In its first year it raised just under £120 million, ringfenced solely for research, prevention and treatment of gambling-related harm, split 20 per cent to research through UK Research and Innovation, 30 per cent to prevention through the Office for Health Improvement and Disparities and the Scottish and Welsh Governments, and 50 per cent to treatment through NHS England and the Scottish and Welsh Governments. From 1 April 2026 NHS England took commissioning responsibility for gambling-harms treatment in England against approximately £100 million a year. Offshore operators pay none of it. That is not a moral point; it is a funding line.

Frequently Asked Questions

Is it legal to use a new casino not on GamStop?

Yes, for the player. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and the Commission states it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where the operator holds a licence elsewhere. The Act's general gambling offences attach to those who provide facilities, not to adult consumers. The risk to a player is financial, not criminal: no UK protections, no dispute route that can enforce anything, and no recourse if the site closes.

What is a new online casino not on GamStop actually licensed by?

Usually one of four things. Curaçao, now under the National Ordinance on Games of Chance that took effect on 24 December 2024 and direct licensing by the Curaçao Gaming Authority. Anjouan, under 2005 legislation with the Anjouan Offshore Financial Authority named as competent regulator. Kahnawà:ke, under a commission established in 1996. Or nowhere at all — Costa Rica operates no comprehensive gambling licensing regime and its Legislative Assembly rejected Bill No. 25,057 in early 2026, which would have created one. The licence, and its register, is the thing to check.

Do new casino sites not on GamStop pay out?

Some do. The relevant question is on what terms, and the terms are disclosed. BlueChip Casino limits withdrawal of winnings generated with bonus funds to 300 per cent of the credited bonus amount, with any excess voided. Ignition Casino applies a 25× wagering requirement before bonus-derived winnings may be withdrawn, gives live dealer and craps 0 per cent contribution towards clearing, and may remove subsequent winnings where no-deposit bonuses are redeemed consecutively. None of these clauses is unlawful where the operator is licensed; all of them decide what actually reaches a bank account.

Are new UK casinos not on GamStop a real category?

No, and the phrase gives the trick away in two words. A casino licensed in Great Britain must be part of GAMSTOP as a condition of its licence under social responsibility code 3.5.5, and since April 2020 must check its entire customer base against the register at least every 24 hours. A UK-licensed operator that did not participate would lose its licence — two operators had licences suspended on 3 April 2020 for failing to integrate by the deadline. So "UK" and "not on GamStop" cannot both be true of a licensed operator, and a site that claims both is using "UK" as a flavour word.

What should a new pay by phone casino not on GamStop tell me before I deposit?

Three things, in writing. The licence and the register entry that proves it. The customer-funds rating — "not protected", "medium protection" or "high protection" — with the method behind it. And the withdrawal terms: whether there is a maximum limit, a processing window, or any discretion to void winnings. If the phone bill sits alongside a bonus, check the maximum cash-out multiplier too. In Britain those disclosures are mandatory; licence condition 4.2.1 requires the funds disclosure in writing, acknowledged before funds are used for gambling. Offshore, everything is voluntary, and voluntary disclosure is the only kind worth reading.

Where does an exclusion fit in all this?

It holds for its full term, and it stays in place after the end of the chosen term unless the person contacts GamStop to remove it. Registering blocks gambling with all online operators licensed in Great Britain for six months, one year, five years, or five years with auto-renewal, and cannot be cancelled during the period. If it is not deactivated, GamStop holds the data through a further automatic seven-year period during which operators are told the person was previously excluded. GamStop registrations are not removed early. An offshore site does not undo any of that; it simply sits outside a system it was never part of.

New Sites Outside the Register

The category is smaller and more cynical than its marketing suggests: a handful of jurisdictions charging a fraction of a serious regulator's fees, a model built to survive the enforcement that actually works, and terms that move the cost from the deposit to the withdrawal — and the register of 614,738 excluded people is the market being farmed.

Two facts close the argument. The Gambling Commission's enforcement data shows registrar blocks and website suspensions cutting engagement by an average of 91 per cent, against 30 per cent for Google removals and 8 per cent for Facebook removals — which is why the good offshore operations live in apps, rotate domains and avoid search. And on the Commission's own data covering June to September 2024, 96.3 per cent of 44.2 million withdrawals by customers of large UK-licensed operators cleared automatically. That gap is the product being sold, and anyone who wants to talk it through can call the National Gambling Helpline free on 0808 8020 133, 24 hours a day.