Any gambling site not on GamStop is a site without a Gambling Commission licence, because the self-exclusion scheme is a licence condition for British operators. Those sites are not licensed in Great Britain, they do not receive the GamStop register, and British consumer protections, ADR schemes and compensation routes do not reach them.
Gambling sites not on GamStop UK is, in practice, a shorter way of writing "offshore operators that cannot check a British self-exclusion list". The scheme's own paperwork settles the first point: under LCCP social responsibility code 3.5.5, "Licensees must participate in the national multi-operator self-exclusion scheme", and since 31 March 2020 that obligation has sat on every online licence. A site that does not join cannot hold the licence. The trade press is blunter than the regulator on the consequence — that offshore operators outside the licence are not connected to GamStop at all is stated by press and industry sources rather than on a Commission page, so I treat it as reported rather than settled. What is settled is the direction of travel. The Gambling Survey for Great Britain, published 16 July 2026, found 2.4% of adults scoring 8 or more on the problem gambling severity index; the Commission's own analysis, published 5 November 2026, put engagement with illegal sites at 0.6% of the whole population in the past four weeks. Both numbers are small. Both are people, not percentages.
The angle I keep coming back to is the one most offshore traffic now arrives through: a phone. Illegal and offshore products live in an app or a mobile browser tab, install in seconds, and are gone from the home screen just as fast. That convenience is not a side issue. It is the whole product, and it is why the checks below are worth running before the app is opened, not after a withdrawal stalls.
Table of Contents7
- Offshore Sites, Judged Against the British Benchmark
- Access to the GamStop Register and Licensed Operators
- Five Signs a Site Can Be Trusted — and I Mean Checked, Not Believed
- How I Would Vet an App Before It Gets a Home Screen Icon
- What the Regulator's Numbers Say About the Size of This Market
- ## Frequently Asked Questions
- The App Is Only as Good as the Licence Behind It
Offshore Sites, Judged Against the British Benchmark
UK gambling sites not on GamStop cannot, by definition, be measured against the licence they lack — so the useful comparison is against what a British licence actually delivers, and against what the offshore alternatives typically offer instead. This is where the two markets part company with consequences a player can feel, in the app and at the bank.
A British-licensed app has to clear a person's age and identity before they wager. Licence condition 17, introduced on 7 May 2019 and still in force in the version effective 29 July 2026, requires information establishing name, address and date of birth before gambling is permitted. That single rule is why a fully verified account tends to pay out quickly and why, when checks are rushed, it does not — the Commission's August 2026 blog reported that over a quarter of complaints reaching its contact centre concern identity verification. Offshore apps usually skip that friction entirely, and it is the withdrawal that later absorbs it.
Then there is the term that builds in delay by design. Offshore terms commonly allow the operator to review or hold withdrawals, to cap what a bonus win converts into, and to require documentation only at the point of cash-out. Ignition's published terms, for example, cap the maximum bet per wager at 20% of the deposited amount and warn that breaching it "may result in account closure, forfeit of the Bonus, and any winnings generated during the wagering of the Bonus". BlueChip Casino reserves the right to limit the amount withdrawable from bonus-generated winnings to 300% of the credited bonus amount, with the excess voided. Both are lawful in their jurisdictions. Neither would survive the Commission's fair-terms guidance, which bars any maximum limit on what a consumer may withdraw from their deposit balance.
The Welsh picture is not a separate regime. Welsh gambling sites not on GamStop are the same offshore apps, reached through the same app stores, with one practical difference on the help side: callers in Wales are given 0808 2819 265 for the National Gambling Helpline, alongside 0808 8020 133 for England and Scotland.
Where UK rule and offshore practice diverge most sharply is in the terms that govern the money itself.
| What the terms do | A British licence permits | Offshore practice, as published |
|---|---|---|
| Maximum limit on withdrawing the deposit balance | Prohibited — no term may cap it | Permitted; BlueChip caps bonus-derived winnings at 300% of the credited bonus |
| Cancelling a withdrawal to keep playing | Banned since 31 October 2021 (RTS 14B) | Not banned |
| Maximum bet while a bonus is running | Not a licence term | Ignition: 20% of the deposited amount |
| Wagering on bonus funds | Capped at 10× from 19 January 2026 (SR Code 5.1.1) | Ignition: 25×; trade coverage of welcome offers reports 25×–40× |
| Identity check timing | Before the first wager (LC 17) | Often deferred until a withdrawal is requested |
| Credit card deposits | Banned since 14 April 2020 | Typically accepted |
| Self-exclusion list checked | Every 24 hours at minimum, since April 2020 | No check possible — the register is not disclosed to them |
| Customer funds protection rating | Must be disclosed, with insolvency rating, in writing | No equivalent disclosure requirement |
None of this makes an offshore account unplayable. It makes it a different kind of relationship: one where the terms, not the regulator, decide what happens when something goes wrong.
Access to the GamStop Register and Licensed Operators
Everything else on this page is downstream of a single fact. GambStop is a register, and only licensed operators are given access to it. The scheme itself is free, run by The National Online Self Exclusion Scheme Limited (company number 10504973), and established in June 2017 by the Remote Gambling Association at the request of DCMS and the Gambling Commission. It went live on 27 April 2018, and in November 2025 it was renamed Gamstop Online after a website update. The name has always been a source of slips, including spelling it "gamestop" when it is in fact GamStop.
A registration blocks a person from online operators licensed in Great Britain for 6 months, 1 year, 5 years, or 5 years with auto-renewal, and the practical detail is that signing up takes minutes but the block can take up to 24 hours to bite. After that it cannot be cancelled during the term. The scheme's terms of use, last updated 20 May 2026, are unusually firm: you may only switch off auto-renewal in the final six months of a five-year period, auto-renewal can run for up to four further five-year periods, and if you do nothing at the end of the chosen term Gamstop holds your data through a further automatic seven-year self-exclusion period during which operators are told you were previously excluded. The Group's 2025 annual report devotes a section to its refusal to remove registrations early. That is the whole architecture, and it is designed to be difficult.
The first-time experience, then, is a licence check the operator runs silently. The later experience is the same check, repeated at least daily on the entire customer base — a requirement introduced in April 2020, which also stopped registered people receiving direct marketing. It either matches or it does not. There is no grey area and no human judgement.
The warning signs are all on the other side of the line. An offshore app cannot run that check, so a registration has no reach into it. Where an operator, or an affiliate writing on its behalf, presents an unlicensed site as a way round a registration, that is not a workaround, it is a broken promise: self-exclusion holds for its full term and then stays in place until the person contacts GamStop to remove it. Two more warning signs are worth naming. First, a licence seal that cannot be verified — a Curaçao "Certificate of Operation" seal must redirect to cert.cga.cw, and a certificate showing a different domain from the one being visited belongs to somebody else. Second, an unlicensed site carrying a licensed operator's games, which the Commission warned about in an industry notice on 20 January 2025, noting that such sites often target people who have self-excluded and may have inadequate social responsibility and AML controls.
Five Signs a Site Can Be Trusted — and I Mean Checked, Not Believed
I am sceptical of trust badges, and I am sceptical of reviewers who count them. A sign is only worth something if it can be verified in two minutes on a phone. These five can.
A licence that resolves to a domain
British licence status is checkable: open the Commission's public register, search the operator's trading name, and compare the activities and domain names listed with the site being used. Match the domain, not the brand. On the Curaçao side, clicking the Certificate of Operation seal must redirect to cert.cga.cw; the CGA states plainly that if a certificate shows a different domain name, the site is displaying another operator's certificate and should be treated as unauthorised. Legacy /JAZ numbers are worth nothing on their own — the CGA says a historic number or seal must not be treated as proof of a current licence.
Terms that state the limits before the deposit
Under RTS 12E, a British site must present setting a financial limit as the default option, with declining it as a positive action — and since 31 October 2025 a limit prompt has been required before the first deposit. Offshore, read the bonus terms and find the cap: maximum bet during wagering, maximum cashout from bonus winnings, game contribution percentages, and any time limit. If those four numbers are not on the page the offer is advertised on, one click away under SR Code 5.1.9 for a British offer, the offer is not the offer.
A payout process with no friction added at cash-out
The Commission's position is that friction belongs at deposit, not withdrawal, and that where it has no regulatory concern there is no valid reason to delay a payout. It also says it is not acceptable to delay withdrawals purely for customer-interaction purposes. A site that asks for documents only when a withdrawal is requested is doing the opposite of what licence condition 17.1.1 requires: additional information must not be demanded at cash-out where it could reasonably have been requested earlier.
Customer funds handled with a disclosed rating
British licensees must select one of three insolvency ratings — "not protected", "medium protection" or "high protection" — state which applies in their terms, and, where the rating is "not protected", remind the customer every six months that the funds are not protected and state the value held. The Commission is refreshingly honest that a separate client account does not mean money comes back if the business fails, and that operators may hold customer funds in overseas accounts.
A dispute route that ends somewhere other than the site
Under SR Code 6.1.1, a British licensee must let a customer take an unresolved dispute to an approved ADR provider free of charge after eight weeks. The approved list includes IBAS and eCOGRA. Their published records are useful benchmarks: IBAS reported 3,721 domestic disputes in 2024–25 with an average completion time of 20 days and 100% operator compliance with decisions in the consumer's favour; eCOGRA's GB report for 1 October 2024 to 30 September 2025 recorded 31 days average resolution for domestic disputes and 17.8% of completed disputes ruled for the consumer. Offshore, the equivalent is a named ADR provider in the player terms — Anjouan requires one, with the approved providers currently EGIS ADR, Axion ADR, iGaming ADR and an approved ADR firm — and the Commission, note, cannot resolve individual complaints or get anyone's money back. Kahnawà:ke has a full-time Dispute Resolution Officer, and its rules go further than any UK regime: a player who breaches a self-exclusion prohibition forfeits funds deposited or won to a third-party charity chosen by the Commission.
How I Would Vet an App Before It Gets a Home Screen Icon
Six steps, in this order. Each one exists because something has gone wrong somewhere.
- Check the licence on the regulator's own register, and match the domain. Two minutes, and it eliminates most of the field. A brand name proves nothing; the register lists the domains an operator may use.
- Read the withdrawal terms before depositing, not after winning. Find the cap on withdrawals, any processing fee, and whether documents are demanded at cash-out. A cost-reflective fee and a reasonable limit on the number of separate withdrawals are permitted in Britain — but they must be clear before the deposit, and the fee must not exceed the direct cost of processing.
- Check the customer-funds rating in the terms. If it says "not protected", believe it, and keeping the balance low is a standard precaution.
- Set a deposit limit as soon as the account opens. The prompt is mandatory before a first deposit in Britain; setting it is a two-tap job and it is the one control that works whether or not anyone else is watching.
- Decide, in advance, what a stalled withdrawal means. The Commission receives around 2,000 complaints a year about withdrawal delays — the number one subject of complaints — and expects an explanation where a payout is held. A delay without an explanation is information.
- Put the help route in the phone before it is needed. The National Gambling Helpline is 0808 8020 133, free, 24 hours a day, every day, operated by GamCare; Welsh callers are given 0808 2819 265. Gamblers Anonymous England, Wales & Ulster is on 0330 094 0322. It is worth knowing that the Helpline is not a crisis line — its staff cannot transfer a call about immediate risk and follow their own safeguarding procedures instead.
Step six is the one people skip. It is also the cheapest.
What the Regulator's Numbers Say About the Size of This Market
I am going to be careful here, because this is the part of the subject where figures get used as arguments.
The Gambling Commission has disrupted, since April 2024, 3,140 cease and desist and disruption notices — 2,032 cease and desist, 774 registrar referrals, 402 host referrals and three payment provider referrals — and secured 287,961 URL removals from 447,778 Google and Bing URLs referred. Across 160 illegal websites where traffic data existed, engagement fell by an average of 32%. Method matters more than volume: registrar blocks and website suspensions averaged a 91% fall in engagement each, GEO IP blocking 60%, Google removal 30% and Facebook removal 8%. Search-engine delisting makes a site harder to find; it does not block it. That distinction is the Commission's own.
How large the market is depends entirely on who is counting. H2 Gambling Capital estimated £16.6 billion staked with illegal operators in the UK in 2025, up from about £5 billion in 2019. A Frontier Economics study for the Betting and Gaming Council put online black-market stakes at £2.7 billion a year, 2.1% of the £128 billion staked with GB-regulated remote casino, betting and bingo operators. Yield Sec, working for the Campaign for Fairer Gambling, put 9% of a £8.8 billion online GGR market outside the regulated sector in 2025. Three serious firms, three incompatible answers — which is itself the finding. A single-quarter volume of 7.7 million URLs referred in July to September 2026 tells you about search results, not about stakes.
Meanwhile the licensed market keeps growing: total GB gross gambling yield was £17.5 billion in the year to March 2026, up 4.4%, with remote casino, betting and bingo at £8.3 billion. Online slots alone took £773 million in January to March 2026, up 12% year on year, across 25.1 billion spins and 4.8 million average monthly active accounts. The £5 maximum stake per cycle for adult slots, live since 9 April 2025, and £2 for 18- to 24-year-olds since 21 May 2025, sit alongside that growth rather than against it.
Where this lands for anyone weighing an offshore app on a phone is simpler than any of those totals. The Gambling Commission's analysis published 5 November 2026 found 0.6% of the whole population had engaged with illegal gambling sites in the past four weeks, rising to 2.5% among those who had gambled online in the past four weeks. That is the honest size of it.
## Frequently Asked Questions
What gambling sites are not on GamStop?
Any operator without a Gambling Commission licence. Joining the national multi-operator self-exclusion scheme is a licence condition under LCCP social responsibility code 3.5.5, in force since 31 March 2020, so a site absent from the scheme is absent from the licence. In practice that means offshore operators in Curaçao, Anjouan, Kahnawà:ke and similar jurisdictions, plus sites holding no licence anywhere at all.
Is it legal to use an online gambling site not on GamStop from Britain?
The offence in section 33 of the Gambling Act 2005 attaches to the person providing facilities for gambling without an operating licence, not to the adult customer. The Commission states plainly that offering commercial gambling services to consumers in Great Britain without a licence is illegal, including where the operator holds a licence elsewhere. That is a statement about operators, and it is why British players appear nowhere in the enforcement statistics.
Are best gambling sites not on GamStop safer than the rest?
There is no such thing as a safe offshore site in the British sense, because the protections that define safety here — the self-exclusion register, the credit card ban, the 10× wagering cap, approved ADR, disclosed customer-funds ratings — come from the licence the site does not hold. Between offshore operators the differences are real but narrow: a verifiable Curaçao Certificate of Operation matching the domain, a named ADR provider in the player terms, and segregated player funds are the points worth comparing.
Can an offshore app see a GamStop registration?
No. The register is disclosed to licensed operators, who must check their entire customer base at least every 24 hours — a requirement introduced in April 2020. A registration holds for its chosen term of 6 months, 1 year, 5 years or 5 years with auto-renewal, and stays in place after the term ends until the person contacts GamStop to remove it. Nothing about an offshore account changes that, and no site can offer to lift it.
Do offshore sites have to offer the same bonuses?
No. In Britain, SR Code 5.1.1 has capped wagering on bonus funds at 10× since 19 January 2026 and banned mixing two or more gambling products in one incentive. Offshore terms are not bound by that: Ignition publishes a 25× playthrough, BlueChip states that the deposit is excluded from the wagering calculation, and trade coverage of welcome offers describes 25× to 40× as typical. Higher multipliers are not a bigger reward; they are a longer queue before any of it is money.
What help is available, and does it apply whoever the operator is?
The National Gambling Helpline, run by GamCare, is 0808 8020 133, free and open 24 hours a day, every day; callers in Wales are given 0808 2819 265. Gamblers Anonymous England, Wales & Ulster is on 0330 094 0322. NHS treatment is commissioned through specialist clinics and regional services receiving almost 5,000 referrals a year. Citizens Advice handles the debt side, and Citizens Advice Scotland runs an advice line on 0800 328 1131.
The App Is Only as Good as the Licence Behind It
The honest summary of gambling sites not on GamStop is that they are ordinary commercial products with an unusually large piece of British consumer protection removed, and the removal is invisible from the outside: the app installs the same, the spins animate the same, and the difference only appears at the point where a term or a register would have decided something. Check the licence domain, read the withdrawal and bonus terms before depositing, and treat an unverifiable seal as no seal at all. The rest of the value on this page is in one number — 614,738 people were on the Gamstop Online register as of July 2026, more than one in two of them on the maximum five-year term, which is a rather large hint about how well the "sites outside the scheme" argument holds up.