Slots not on GamStop are offered by operators with no Gambling Commission licence, so the UK's self-exclusion scheme does not reach them and UK protections do not apply. They exist mostly offshore, take a few days or a few minutes to pay, and carry licence, bonus and payout risks a British-licensed site does not.
It is often typed "gamestop". The scheme is called GamStop.
The pitch is easy to find on a phone. A search, a tap, a site that loads a grid of spinning fruit before the page has finished rendering, and a line somewhere on it promising that no self-exclusion scheme applies here. That last part is the whole product.
The promise word in this niche is "not on GamStop", and it is doing a lot of work. It sounds like freedom. In practice it describes a legal position, not a feature: a slots site outside the scheme is outside the Gambling Commission's reach, which means outside the licence conditions that cap bonus wagering at ten times, ban reverse withdrawals, require your money to sit in a client account and insist any dispute can go to an approved alternative dispute resolution provider for nothing. Those protections are not withheld from offshore sites. They were never attached.
The scale of the gap is worth a number. Gambling Commission analysis published on 5 November 2026, covering April 2025 to April 2026, estimates that among people who had gambled online in the previous four weeks, 2.5 per cent had engaged with illegal gambling websites, with another 1.5 per cent having done so in the past year. Not a wave. Not nothing, either.
What follows is what the slot-market end of it actually looks like from a phone, and how to judge it.
Table of Contents10
- Where the Slot Sites Outside the Scheme Sit
- Licence Types and What Each One Really Buys
- Online Slots Without the Scheme and the Reality Check
- The Identity Checks This Topic Turns On
- Five Signs a Slot Operator Can Be Trusted
- How to Judge a Slot Site Outside the Scheme, Step by Step
- Slot Sites Outside GamStop and the Payment Question
- The Regulator, the Numbers and What Is Genuinely Uncertain
- FAQ
- The Mobile Gambling Reality
Where the Slot Sites Outside the Scheme Sit
Slot sites not on GamStop are almost entirely offshore, and the reputable-sounding ones usually name a regulator. The name is the first thing to inspect, because a licence from a small island authority is a business registration with a logo, not a consumer protection regime.
British-licensed operators set the standard this article measures against, because the standard is written down. Since 31 March 2020 every online operator must be part of GamStop as a condition of its Gambling Commission licence — the requirement sits in social responsibility code provision 3.5.5 of the Licence Conditions and Codes of Practice, which says licensees must participate in the national multi-operator self-exclusion scheme. In April 2020 the Commission added that operators must check their entire customer base for registration at least every 24 hours. The scheme itself is free, run by The National Online Self Exclusion Scheme Limited, live since 27 April 2018, and renamed Gamstop Online in November 2025.
Offshore sites that hold no Commission licence are not connected to GamStop, and the scheme's obligations apply only to UK-licensed operators — a point consistent with GamStop's own terms of use, though it comes more often from trade and press sources than from a regulator's page. The practical consequence is the one the market sells: a person whose exclusion holds can open an account there.
Self-exclusion is not a door that opens. Registering blocks a person from gambling with companies licensed in Great Britain for six months, one year, five years or five years with auto-renewal, and once registered it cannot be cancelled or deactivated during the term. It also stays in place after the chosen period ends unless the person contacts GamStop to remove it. Offshore sites sit outside that, and outside it is a worse place to be, not a loophole.
Licence Types and What Each One Really Buys
The comparison below is by licence and the terms that come with it, not by brand. Offshore regulators are named because the names are public; what matters is the fee structure and the dispute mechanism behind them.
| Licence | Typical annual cost to the operator | Player-fund and dispute terms |
|---|---|---|
| UK Gambling Commission | Statutory levy at 1.1% of previous-year gross gambling yield for online operators | Client account for customer funds, three insolvency ratings disclosed in writing, complaints to an approved ADR body free of charge after eight weeks |
| Malta (MGA) | EUR 25,000 fixed annual licence fee plus 5% gaming tax, EUR 5,000 application | Minimum EUR 100,000 paid-up capital for Type 1 and 2 B2C licences, public Unauthorised URLs list |
| Curaçao (CGA) | EUR 47,450 a year for B2C — EUR 24,490 to the Treasury plus EUR 22,960 supervisory | Certificate of Operation Seal must redirect to cert.cga.cw and match the domain being used |
| Anjouan | EUR 17,828 on issue and EUR 17,828 to renew, EUR 500 per extra domain | Funds segregated, RNG certified, named approved ADR provider in player terms |
| Kahnawà:ke (KGC) | USD 20,000 annual CPA fee, USD 40,000 application, rising on 1 January 2027 | Contractual relationship with the player, limits including zero, voluntary self-exclusion stated as permanent |
The Curaçao row is the one to read twice. The National Ordinance on Games of Chance took effect on 24 December 2024 and replaced the old master-licence model with direct licensing by the Curaçao Gaming Authority, so the former private master licensors can no longer grant new Curaçao licences, and the legacy "orange" sub-licence certificates ended on 15 October 2025. Licensing activities ceased for the four former master licensors on dates running from 18 August 2024 to 31 January 2025. A historic /JAZ number on a footer is not proof of anything current.
The Anjouan row is the other one. One ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around EUR 17,000 per licence per year, and that Comoros financial intelligence officials described Anjouan Corporate Services as operating illegally. Anjouan Gaming itself said in a statement on 10 June 2026 that "An Anjouan Internet Gaming Licence is not, and has never been presented as, a universal authorisation to operate in every country in the world". Both sentences are true at once, and together they describe the whole offshore slot market in miniature.
Online Slots Without the Scheme and the Reality Check
Online slots not on GamStop are not exempt from anything in British law except the parts that would protect the player. Section 33 of the Gambling Act 2005 makes it an offence for a person to provide facilities for gambling without an operating licence, punishable on summary conviction by up to 51 weeks' imprisonment, a fine at level 5, or both. The Commission states plainly that it is illegal to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where the operator holds a licence in another jurisdiction.
Enforcement is real, and slow. Since April 2024 the Commission's Illegal Markets team has issued 3,140 cease and desist and disruption notices, referred 447,778 Bing and Google URLs and secured 287,961 removals. Across 160 illegal gambling websites with traffic data, engagement fell an average of 32 per cent after disruption. By method, registrar blocks and website suspensions produced an average 91 per cent fall in engagement, ahead of GEO IP blocking at 60 per cent, Bing removal at 52 per cent and Google removal at 30 per cent.
Note what those numbers say to a phone user. A registrar block removes the domain. A GEO IP block refuses the British connection. A search-engine removal merely makes the site harder to find — and on a phone, harder to find is a thin shield, because an app or a bookmark does not need Google.
The Commission issued an industry warning notice on 20 January 2025 about casino games from licensed suppliers appearing on unlicensed websites, noting those sites often target customers who have self-excluded via GamStop and may have inadequate social responsibility and anti-money-laundering controls. That is the trade described from the other side of the counter.
Slot Games and the Supply Chain Behind Them
Slot games not on GamStop are usually identical games. The studios licence their titles to UK operators; where those titles surface on an unlicensed domain, the game is unchanged and the terms around it are not. The Commission's fair-terms guidance and the 19 January 2026 bonus rules apply to licensees — the ten-times wagering cap, the ban on mixing product types in one incentive, the requirement that deposit and bonus balances be shown separately.
Offshore, none of that applies. Published offshore terms show deposit-bonus multipliers in the 35x to 50x range and no-deposit multipliers at 40x to 60x with a cashout cap, and one operator caps withdrawable winnings from bonus play at 300 per cent of the credited bonus, voiding the excess. Another reserves the right to exclude players from a promotion and confiscate funds in the event of offer abuse, with penalties that include permanent account closure.
Mobile Slots and Where They Run
The site angle here is unavoidable: this is a phone product. Apps, home-screen shortcuts and mobile browsers all do the same job, and the device changes nothing legally. What it changes is exposure — a slot that opens in two taps gets opened. The Gambling Commission's estimate of total time spent on illegal sites by GB consumers was 306 million minutes in January 2025, falling to 116 million by June 2025 and 152 million in July 2025, with a VPN adjustment. Traffic moves. It does not go away.
Blocking software is the honest counterweight. GamStop signposts Gamban and BetBlocker; BetBlocker states it blocks over 1,368,000 gambling websites and 3,100 apps, needs no registration and is free worldwide, and Gamban says its protection is designed to be as difficult to remove as possible. Bank blocks are the other layer — the Commission's list, last updated 16 October 2026, names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling. They work at card level, must be switched on per card, and most banks apply a 48-hour or 72-hour cooling-off period before gambling payments resume.
If any of this stops being an interesting question, the National Gambling Helpline is free on 0808 8020 133, 24 hours a day, every day, operated by GamCare. In Wales there is also 0808 2819 265.
The Identity Checks This Topic Turns On
Everything in this niche turns on one machinery, and it is not the slot. It is identity verification.
The first time, on a UK-licensed site, the check has moved forward. Licence Condition 17 has required since 7 May 2019 that a licensee obtain and verify information establishing a customer's identity before that customer is permitted to gamble — name, address and date of birth at minimum. The Commission's August 2026 blog says onboarding on partial or equivocal information, initials instead of full names, nicknames, is not sufficient. In practice that means a database match against credit reference agencies and the electoral roll takes seconds and needs no documents. Under money-laundering rules, remote casinos must identify and verify at €2,000 of deposits or withdrawals, single or linked. Many UK sites verify at registration anyway; a hybrid approach allows full verification to wait for that threshold.
The second time is the problem. Licence Condition 17.1.1 says a withdrawal request must not create a requirement for extra information if the licensee could reasonably have asked for it earlier. That condition exists because the trick was so common: let a player deposit freely, then demand a passport, a utility bill and a bank statement at the point of withdrawal. Over a quarter of complaints to the Commission's Contact Centre concern identity verification, and it is among the most common dispute types reaching ADR providers.
Offshore, that condition does not exist. So the warning signs are worth memorising:
- Verification is deferred until a withdrawal is requested, which on a UK licence is a breach and offshore is simply the business model.
- The document list keeps growing after the first set is sent.
- Source-of-funds requests arrive with no stated threshold and no deadline.
- The terms reserve the operator's discretion to void winnings.
- A selfie or video request appears only once the balance has grown.
None of that is illegal offshore. It is just expensive, discovered late.
Five Signs a Slot Operator Can Be Trusted
The Licence Checks Out Against the Regulator, Not the Footer
A UK licence can be checked by clicking through to the Commission's public register and confirming that the site's activities and domain names match what is on it. A Curaçao Certificate of Operation Seal must redirect to cert.cga.cw, and if the certificate behind it shows a different domain from the one being used, the site is displaying another operator's paperwork. Kahnawà:ke's Logo Certificate Program, effective 15 January 2010, generates a Certificate of Good Standing. Anjouan certificates carry a licence number and a QR code linking to the public register; a certificate that will not verify there should not be relied on.
The Terms Say Who Holds the Money
UK rules require a licensee holding customer funds to state in writing whether those funds are protected on insolvency, at which of three ratings, and by what method — and to obtain acknowledgement before the customer gambles. Offshore, Kahnawà:ke requires a contractual relationship free of unfair terms; Anjouan requires segregated player funds and certified random number generators. A terms page that never mentions the money is not silent by accident.
The Withdrawal Process Is Published Before It Is Needed
A site worth using states the processing time, the payment methods, any fee and any per-withdrawal limit in writing before a first deposit. Where a cost-reflective processing fee is charged in the UK it must not exceed the direct cost of processing. Offshore terms routinely cap cashouts from bonus play instead.
The Bonus Terms Fit on One Screen
Under UK rules, significant conditions for a free bet or bonus — deposit, wagering or withdrawal requirements — must be clear, with full terms no more than one click away. The cap since 19 January 2026 is ten times. A term requiring fifty turns of the reels before anything is withdrawable is the tell; the Commission itself said the limit "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements".
There Is a Named Dispute Route With Teeth
UK licensees must let a customer take an unresolved dispute to an approved ADR body free of charge after eight weeks. The Commission's approved list includes ADR Group, Pegasus ADR Service, one licensee, CEDR, eCOGRA, IBAS, ProMediate and Tattersalls Committee. Offshore, Anjouan requires a named approved ADR provider in player terms — EGIS ADR, Axion ADR, iGaming ADR or an operator — and Kahnawà:ke employs a full-time Dispute Resolution Officer. A site with no named route and no decision record has neither.
How to Judge a Slot Site Outside the Scheme, Step by Step
- Establish which regulator is claimed, then verify it independently. Open the register the seal points to and check the domain, not just the logo. The reason is simple: a licence number in a footer costs nothing to copy from another site.
- Read the customer-funds clause before depositing anything. Look for the insolvency rating and the method used to protect funds. The reason is that a separate client account does not guarantee return of money if the operator fails.
- Read the withdrawal section twice, and the bonus terms once. Note the stated processing time, fees, per-request limits and wagering multiplier. The reason is that these are the terms that decide what leaves the account, and they are cheapest to read before there is a balance.
- Check whether identity verification is requested at registration or only at withdrawal. The reason is that a request arriving exactly when money is due is the single most common shape of a withdrawal problem, and UK rules forbid the practice that offshore terms permit.
- Test the complaint route with a small, boring question. Ask support something a human must answer in writing. The reason is that eight weeks of silence is survivable with a £20 balance and not with a £2,000 one.
- Put a payment-level block and blocking software in place as well. A bank block at card level, plus software such as Gamban or BetBlocker, is the only layer that operates when a site is not the one being used. The reason is that no term on any website does the work of a declined payment.
Slot Sites Outside GamStop and the Payment Question
UK slots not on GamStop is a phrase that usually comes attached to a payment method, because the payment method is how the site is found. PayPal, phone bill, mobile billing — the wording varies, the mechanics do not.
UK-licensed operators must accept payment only by a method whose provider is a payment service provider within the Payment Services Regulations 2017, under licence condition 5.1.2, effective 31 January 2024. Credit cards have been banned for gambling since 14 April 2020, and operators must also satisfy themselves that money arriving from an e-wallet was not loaded from a credit card. Those constraints are what push some players and some operators offshore, where the payment rail is chosen by the operator.
Speed at a UK site is not the problem. Commission data covering June to September 2024 recorded 44.2 million withdrawals by customers of large online operators, of which 96.3 per cent cleared automatically, 3.5 per cent within 24 hours and 0.1 per cent in up to 48 hours. Complaints about withdrawals and financial transactions coded by the Contact Centre fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025. Reverse withdrawals — the option to cancel a pending withdrawal and play it again — have been banned under requirement 14B since 31 October 2021.
The LCCP sets no fixed maximum number of days for a payout. It relies on fair and open terms, the identity-verification condition and the prohibition on unfair terms. Enforcement still lands: one licensee agreed a £900,000 regulatory settlement on 21 October 2026 over failures including unnecessarily delaying consumer withdrawals, and one of the withdrawal-specific findings was a term letting customers request only one withdrawal at a time. An operator was fined £170,000 in July 2025 for failures including a term stating it had the right at its own discretion to close accounts or forfeit winnings.
Offshore, a crypto rail is quick and irreversible, e-wallets charge on the way out — Skrill and Neteller both charge 2.80 per cent of the amount withdrawn with a minimum around EUR 3.50 for a bank transfer, effective 12 January 2026 — and a phone-bill payment is not a withdrawal method at all. Anyone comparing speeds should compare them like for like.
The Regulator, the Numbers and What Is Genuinely Uncertain
Some of this market is measured well and some of it is not, and the difference matters.
The Gambling Commission's figures are published and dated. Its third annual Gambling Survey for Great Britain, published 16 July 2026 from 20,775 adults over fieldwork from January 2025 to January 2026, found 2.4 per cent of participants scoring 8 or more on the Problem Gambling Severity Index, stable across three years at 2.5, 2.7 and 2.4 per cent. Total Great Britain gross gambling yield was £17.5 billion in the year to March 2026, up 4.4 per cent, with remote casino, betting and bingo at £8.3 billion.
The size of the unlicensed market is where the numbers stop agreeing. Market-intelligence firm H2 Gambling Capital estimates £16.6 billion was staked with illegal operators in the UK in 2025, up from about £5 billion in 2019, with the legal proportion falling from 97 to 92 per cent. A Frontier Economics study for the Betting and Gaming Council put online black-market stakes at £2.7 billion a year — 2.1 per cent of the £128 billion staked with GB-regulated remote operators. Yield Sec, analysing for the Campaign for Fairer Gambling, put the GB online market at £8.8 billion gross gaming revenue in 2025, split 91 per cent regulated and 9 per cent unregulated. Same country, same year, differences of an order of magnitude.
I know which of those I trust more, and it is none of them entirely. The Commission's own October 2024 methodology combines web-traffic data with an assumption of £0.32 of gross gaming yield per minute of online slots play, and states explicitly that it does not capture activity hidden by VPNs. That caveat is doing more honest work than any of the headline totals.
Two further facts sit alongside. GambStart Online reported 614,738 consumers on the register as of July 2026, more than one in two of whom had chosen the maximum five-year exclusion. And the Commission's public position on what a regulator can do is narrow: it is a regulator, not an ombudsman, and it cannot resolve individual complaints or get money back.
FAQ
What slot sites are not on GamStop?
Any slot site without a Gambling Commission licence, which in practice means offshore operators licensed in Curaçao, Anjouan, Malta or Kahnawà:ke, or holding no meaningful licence at all. They are not connected to the scheme, so an exclusion does not reach them. Costa Rica, often cited, operates no comprehensive gambling licensing regime; the "data processing license" sometimes mentioned is not a licence in the strict legal sense.
Are offshore slot sites legal to play at from Britain?
It is illegal for an operator to provide gambling facilities to consumers in Great Britain without a Commission licence, including where it holds a licence elsewhere — section 33 of the Gambling Act 2005, carrying up to 51 weeks on summary conviction. The Act's general gambling offences attach to those providing facilities, not to adult consumers, and the Commission itself describes its remit as regulating sites that trade or advertise to GB customers.
Do not on GamStop slots accept PayPal?
Some claim to. The question is what sits behind the brand, because PayPal is a payment service provider under the Payment Services Regulations 2017, and UK licensees may accept payment only from a provider within those regulations. An offshore operator routing a deposit through an e-wallet is not bound by that condition, and the credit-card ban that applies to licensed operators — in force since 14 April 2020 — is not enforced on it either.
What slot games do offshore sites actually run?
Largely the same studio titles, in a different legal wrapper. The games are identical; the terms surrounding them are not. Slots stake limits of £5 per game cycle for adults and £2 for those aged 18 to 24, live since April and May 2025, apply only to Commission licensees, and the ten-times wagering cap in force since 19 January 2026 does not travel offshore with the game.
Why do slot withdrawals get held for checks?
Usually because verification was deferred. Over a quarter of complaints to the Commission's Contact Centre concern identity verification, most often raised when documents are demanded only at withdrawal. On a UK licence that can breach Licence Condition 17.1.1. Offshore it is simply permitted, and operators cannot confiscate funds for missing identification on the UK side — the Competition and Markets Authority's undertakings, published 29 August 2018, say players are entitled to deposits and winnings from them.
What if someone wants the exclusion to hold instead?
GamStop blocks licensed operators for six months, one year, five years or five years with auto-renewal, cannot be cancelled during the term, and stays in place afterwards until the person contacts GamStop to remove it. Signing up takes minutes but can take up to 24 hours to become effective, and operators check every customer at least every 24 hours. The National Gambling Helpline, run by GamCare, is free on 0808 8020 133 at any hour.
The Mobile Gambling Reality
The offshore slot market exists because a licence is cheap and a promise is cheaper, and a phone makes both look identical until the balance is large enough to matter.
What is checkable is narrower than the marketing: a licence that verifies on the regulator's own register, a customer-funds clause that names an insolvency rating, withdrawal and bonus terms published before a deposit rather than after a win, a named dispute route with a record of decisions, and a payment block at card level as the last resort. Everything else is a footer.
The number that keeps the area interesting is this: in the quarter from July to September 2026 the Commission referred 1,835 websites to search engines — 7,677,211 URLs — and issued 546 cease and desist notices to illegal operators, having begun zero criminal investigations in the preceding quarter. Nobody is going to prison over a spinning reel. That is precisely why the checks are the player's job.
