Mobile Casino Not on GamStop and Balance Protections

A mobile casino not on GamStop is an app or site that takes deposits from a phone but holds no Great Britain licence, so the national self-exclusion scheme cannot reach it. Your balance sits with a company outside UK jurisdiction: no GamStop block, no UK complaints route, no compensation if it fails.

The phrase does a lot of quiet work. "Pay by mobile" sounds like a payment method; in an unlicensed app it is usually a credit facility dressed as convenience. "Not on GamStop" sounds like a gap in the wall; legally it is a gap in the law's reach, and the thing left unprotected is the money already sitting in the account.

I have spent years reading licence conditions and operator terms side by side, and the pattern is consistent. The sites that shout loudest about sitting outside GamStop are the ones whose terms run longest, whose withdrawal clauses have the most sub-paragraphs, and whose identity checks arrive at the least convenient moment. None of that is illegal. It is simply the consequence of trading with a business that answers to a small island regulator, or to nobody at all.

This page is about the mechanics: what a phone-bill deposit is, how the money moves, what a British licence would have guaranteed, and what an offshore one leaves to chance. It treats GamStop as it is — a scheme with real teeth inside its jurisdiction and none whatsoever outside it — and it looks at every claim from one angle: what protects a player's balance, and what only looks as though it does.

What A British Licence Guarantees, And An Offshore One Does Not

Start with the floor beneath the floor. Since 31 March 2020, every online operator serving Britain must be part of GamStop as a condition of its Gambling Commission licence, a requirement sitting in the Licence Conditions and Codes of Practice at social responsibility code provision 3.5.5, which states that licensees must participate in the national multi-operator self-exclusion scheme. In April 2020 the Commission added a requirement to check the entire customer base against the register at least every 24 hours. Two operators had their licences suspended on 3 April 2020 for missing the integration deadline. That is what enforcement looks like when a regulator has leverage.

It also tells you exactly where the leverage stops. GamStop Online blocks access to gambling websites and apps licensed in Great Britain only, and can only exclude people from participating operators; it cannot prevent access to services run by organisations that do not participate in the scheme. Offshore sites holding no Commission licence are not connected to it [unconfirmed — stated by trade and press sources rather than a regulator page, though consistent with GamStop's own terms of use].

An offshore site is never a way round a self-exclusion. It is a way round the consequences of breaching one. The exclusion itself holds for its full term and then stays in place until the person contacts GamStop to remove it, and registrations cannot be removed early — the Group's 2025 annual report devotes a section to its refusal to do so. Choosing a five-year term with auto-renewal does not lapse after five years; it rolls on for up to four further five-year periods, and the terms of use allow the auto-renewal switch to be turned off only in the final six months. Where a person does not deactivate after their chosen period, GamStop holds the data through a further automatic seven-year period during which operators are told the person was previously excluded. Nothing about that changes because a site in Curaçao has not heard of the scheme.

The Commission has been blunt about who those sites attract. Its industry warning notice of 20 January 2025 described casino games from licensed operators turning up on unlicensed websites, noting that such sites often target customers who have self-excluded via GamStop and may have inadequate social responsibility and anti-money-laundering controls.

And the licence, as ever, is the operator's problem, not the player's. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, carrying on summary conviction up to 51 weeks' imprisonment, a fine at level 5, or both — six months in Scotland. It is immaterial whether the facilities are provided wholly or partly by remote communication, and whether inside or outside the UK; for remote gambling the section bites where at least one piece of remote gambling equipment is situated in Great Britain, or where the provider knows or should know the facilities are likely to be used here. The Act's offences attach to those who provide facilities, not to adult consumers.

Understanding Pay by Mobile Deposits

A pay by mobile casino not on GamStop almost always means one of three things, and they are not equivalent. Carrier billing attaches the charge to a mobile phone bill — a genuine facility, offered by some UK-licensed operators too. A "pay by mobile" slot in an offshore app often means a crypto purchase routed through a mobile interface. And a third category, the one that causes the most damage, is a third-party credit line: money lent to the account, at a fee, repayable whether or not the gambling goes well.

The distinction matters because of who carries the risk while the money sits there. On a licensed site, the stake is either a payment to a licensed operator or a loan from a regulated lender. On an offshore site using a credit facility, it is a debt to a company outside UK jurisdiction, secured against a balance held by another company outside UK jurisdiction.

Carrier billing has a further quirk. It moves the transaction onto a phone account, where the cap is set by the mobile network rather than by a gambling licence, and where the spending sits outside the banking blocks that catch gambling merchant codes. That is the practical reason pay-by-mobile keeps coming up in this corner of the market.

Money Movements at Mobile Casinos Outside GamStop

Mobile casinos not on GamStop tend to be fast in one direction only. Deposits clear in seconds because every rail available to a phone — card, e-wallet, carrier billing, stablecoin — is built to push money at a merchant. Withdrawals run the other way, through manual review, and manual review is a place where an unlicensed operator has no deadline at all.

The Commission has published the benchmark for what a licensed operation looks like. Covering June to September 2024, its data recorded 44.2 million withdrawals by customers of large online operators, of which 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours and 0.1 per cent took up to 48 hours. Earlier data from some of the largest companies showed around 99 per cent of withdrawal requests approved, processed and fulfilled within 24 to 48 hours. That is the standard an offshore site is being compared with, and it is a high one.

The Commission's expectations are explicit: it is not acceptable for operators to introduce friction when a customer tries to withdraw rather than when they deposit, or to place commercial interests above the customer's; where there are no regulatory concerns there is no valid reason to delay a payout; and delaying for safer-gambling purposes is not fair, transparent or necessary. LCCP licence condition 17.1.1 forbids requiring extra information at withdrawal that the licensee could reasonably have requested earlier. Withdrawals have been the number one subject of consumer complaints to the Commission for years, around 2,000 a year by July 2024, though complaints coded to withdrawals and financial transactions fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025.

None of that machinery exists offshore. There is no condition 17.1.1, no fair-and-open condition 7.1.1, no CMA undertakings and no regulatory settlement waiting for a payout clause that keeps a customer waiting. What exists is a contract of adhesion in a jurisdiction where the player has no practical remedy, and often a term granting the operator sole discretion over voided winnings — the very drafting that cost one licensee £170,000 in July 2025, and formed part of the £900,000 settlement one licensee agreed in October 2026.

Protection by Payment Route

The table below compares routes by method, not by brand. The figures are drawn from scheme rules, regulator conditions and published fee schedules; the times are the ones the scheme itself claims, not marketing claims about them.

Two numbers in that table deserve a second look, because they are the ones people misread. A Bitcoin block does not arrive on a schedule: within any 10-minute window the probability of a block being found is about 63%, rising to 95% within 30 minutes and 99.7% within 60 minutes. And Faster Payments' £1 million ceiling is a scheme maximum, not an entitlement — individual banks set lower per-payment limits, and the scheme publishes a bank-by-bank table.

Balance Security and Phone Bill Deposits

The honest answer to what a phone-bill deposit buys on an offshore site is: an IOU. The player's claim is against the operator, and the strength of that claim depends on rules the operator does not have to follow.

Where a British licence applies, customer funds must be kept in a separate client bank account, separate from the operator's business accounts. The operator must pick one of three insolvency ratings — not protected, medium protection or high protection — must state which applies in its terms, and if rated "not protected" must remind the customer every six months that their funds are not protected in the event of insolvency, stating the value held. Money staked within an open bet is not customer funds at all and is not covered by any protection arrangement. And even a separate client account does not mean money comes back if the operator fails; operators are legally allowed to hold customer money in overseas bank accounts. Since 31 January 2024, LCCP condition 5.1.2 has required licensees to accept payment from GB customers only via a method whose provider is a payment service provider within the Payment Services Regulations 2017.

Read that sequence again and notice how limited the protection already is even at the top of the market. Then remove every one of those obligations, remove the six-month reminder, remove the insolvency rating, remove the requirement that the account be disclosed before gambling is permitted — and you have the position offshore. The British version is a disclosure regime with holes in it. The offshore version is silence.

Five Signs A Mobile Casino Can Be Trusted

Each sign below is checkable in a few minutes, from a phone, before any money moves.

The Licence Checks Out On The Regulator's Own Register

A licence number printed on a page proves nothing; the register does. The Commission advises consumers to check before gambling that the business holds a British Gambling Commission licence and to click through to the public register to see whether the site's activities and domain names match. Offshore, the same discipline applies: Curaçao's regulator issues a Certificate of Operation Seal only for an approved and registered player-facing domain, clicking it must redirect to its verification page, and a certificate showing a different domain name from the one being visited belongs to somebody else. Anjouan certificates carry a unique licence number and a QR code linking to a public register, and the authority itself says certificates that cannot be verified there should not be relied on as evidence of licensing status. Kahnawà:ke's Logo Certificate, effective since 15 January 2010, generates a Certificate of Good Standing when clicked.

The Terms Say Where The Money Sits If The Operator Fails

Look for the insolvency rating wording, not for warm adjectives. A British-licensed operator must have one of three ratings and must say what it is. An operator that describes funds as "safe", "secure" or "ring-fenced" without stating a rating and the method used has told you nothing — those are marketing words, and the Commission's own guidance is that a separate client account does not mean customers get their money back.

Withdrawal Terms Have No Ceiling Overlooked

A maximum withdrawal limit on a deposit balance is a prohibited term in Britain; the Commission's own example of an unacceptable clause is "You may withdraw up to £50 per day and up to £500 per week". It is legal offshore. So are maximum cashout clauses attached to bonus winnings, which is a different thing — one operator's published terms cap withdrawal from bonus-generated winnings at 300% of the credited bonus amount, with any excess voided. The check is a search of the terms for the words "maximum", "cap", "limit" and "void", read next to each other.

The Identity Check Happens Before The First Deposit, Not After The First Win

Under LCCP condition 17, introduced on 7 May 2019, licensees must obtain and verify information establishing a customer's identity before that customer is permitted to gamble, and the Commission expects checks brought forward, saying onboarding on incomplete or inaccurate information — initials instead of full names, nicknames, commercial addresses instead of residential ones — is not sufficient. It also warns that fuzzy matching and partial verification create mismatches with records held elsewhere, such as GamStop, undermining self-exclusion. The check: if a site will take a deposit without ever asking who you are, the verification will arrive when it is most expensive, usually at the point of withdrawal. Over a quarter of complaints reaching the Commission's Contact Centre concern identity verification, a concern people raise when documents are requested only on attempting to withdraw.

Payout Clauses Name A Provider And A Deadline

A trustworthy operation can answer two questions in writing: how long a withdrawal takes, and where a dispute goes. In Britain, ADR has a shape: LCCP social responsibility code 6.1.1 requires arrangements to refer disputes to an ADR entity free of charge if unresolved within eight weeks, and approved providers include IBAS, eCOGRA, CEDR, ADR Group, Pegasus ADR Service, ProMediate and Tattersalls Committee. IBAS's 2024-25 report records 3,721 domestic disputes with an average completion time of 20 days and 100 per cent operator compliance with decisions in the consumer's favour. Anjouan requires licensees to designate an approved ADR provider and publish its details, with 30 days to resolve internally first, and lists EGIS ADR, Axion ADR, iGaming ADR and one licensee. Kahnawà:ke employs a full-time Dispute Resolution Officer. A site that names none of this has not forgotten to mention it.

How To Judge A Mobile Casino Before Depositing

Six steps, in the order that saves the most money.

1. Check the licence on the regulator's register, not on the site. Match the licence number and the exact domain name, because the British register lists domain names and Curaçao's seal is issued per approved domain. A licence that exists but does not cover the address you are visiting is not a licence for that site.
2. Read the withdrawal section before the bonus section. Find the maximum cashout clause, the processing-fee clause and the identity-check trigger. The reason is arithmetic: everything else on the site is a promise to pay you happening later, and this is the only part describing how.
3. Confirm who is carrying the balance. Ask directly whether funds are held in a separate client account, what the insolvency rating is, and where the account sits. A British operator owes a written answer; an offshore one may simply not reply, which is itself the answer.
4. Test the support channel with a specific question about money. Ask what happens if a withdrawal is requested during an active bonus. Vague replies, or a link to a 4,000-word terms page, tell you how a dispute will go.
5. Check that a self-exclusion would actually hold. Confirm the operator is on the GamStop register if it claims a British licence, or state plainly that no such block applies if it is offshore. Then add a second layer: blocking software such as Gamban or BetBlocker, or a bank gambling block, which the Commission's list places at Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling. Bank blocks are applied at card level, must be activated on each card, generally carry a 48-hour or 72-hour cooling-off period, and do not affect a credit score.
6. Keep the evidence. Save the terms version, the licence number, the deposit confirmation and every support message. If a complaint has to go anywhere, the operator's own complaints procedure comes first, and a deadlock letter starts the eight-week clock toward ADR. Documents are what turn a grievance into a case.

A note on where help lives, since it applies whoever the operator is. The National Gambling Helpline, run by GamCare, is free on 0808 8020 133, 24 hours a day, every day of the year, and the same number reaches live chat and WhatsApp. In Wales the number given is 0808 2819 265. BeGambleAware directs people to the same helpline and online chat. GamFam, a registered charity set up by people affected by the gambling of family and friends, runs the GRA5P peer-support programme. Gamblers Anonymous England, Wales & Ulster can be reached on 0330 094 0322, Gam-Anon UK & Ireland supports families through [email protected], and the NHS National Gambling Clinic in London takes self-referrals. Citizens Advice offers free confidential advice including on debt, and Citizens Advice Scotland runs a gambling support line on 0800 328 1131. None of those services requires the person to be gambling on a licensed site to be helped.

The Part Of The Market That Answers To Nobody

There is a rung below the offshore licence, and it deserves naming without drama. Costa Rica does not operate a comprehensive gambling licensing regime and has no formal framework for issuing gambling licences; the "data processing license" occasionally cited in the trade is not a licence in the strict legal sense. Its Legislative Assembly rejected Bill No. 25,057 in early 2026, a bill that would have introduced a mandatory licensing regime and addressed unlicensed and offshore operations. Under Costa Rican law, games of chance where the outcome depends primarily on luck rather than skill are generally prohibited, so gambling services should not be offered to or marketed toward Costa Rican residents, and only land-based casinos integrated into qualifying hotels are authorised.

The bigger offshore licences are not the same thing, but they are not a British licence either. Curaçao's National Ordinance on Games of Chance took effect on 24 December 2024, replacing the master-licence and sub-licence model with direct licensing by the Curaçao Gaming Authority. The legacy "orange" sub-licence certificates ended on 15 October 2025, and a historic /JAZ number or legacy seal must not be treated as independent proof that an operator currently holds a valid licence. The authority said on 7 October 2026 that its previous online gaming portal would not return to service and that it is working on an alternative mechanism for verifying licensed domains, because the previous digital seal may be affected by the transition. Fees are modest by regulatory standards: a one-time non-refundable EUR 4,592 application fee for a B2C licence, and a total annual B2C fee of EUR 47,450.

Anjouan's picture is more contested. Its published fee schedule is EUR 17,828 for B2C licence issuance and the same for annual renewal, with EUR 500 per additional domain. The authority says licences carry no territorial restrictions under Anjouan law, but that holders must comply with all applicable laws where they operate, and stated on 10 June 2026 that an Anjouan licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world". An ABC News investigation published on 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around EUR 17,000 each per year, and that Comorian financial intelligence officials described Anjouan Corporate Services as operating illegally; the same investigation reported a former attorney-general of the Comoros calling the licence seller "an illegal entity". Anjouan Gaming disputes that characterisation, citing an independent legal opinion from a firm regulated in England and Wales and Quebec [unconfirmed].

None of this is a reason to panic about every offshore site. It is a reason to notice what a licence is worth. A Curaçao licence is issued for EUR 4,592 and renewed for EUR 47,450 a year; a British licence costs an operator its entire market access. Those two prices buy very different amounts of protection for whoever is holding the balance.

The Checks That Actually Follow The Money

Britain's regulator does not sit still on the unlicensed market, and its numbers are worth knowing because they describe the odds. Since April 2024 the Illegal Markets team issued 3,140 cease and desist and disruption notices — 2,032 C&Ds, 774 registrar referrals, 402 host referrals and 3 payment provider referrals — referred 447,778 Bing and Google URLs, and secured 287,961 URL removals. Across 160 illegal gambling websites with traffic data, there was an average 32 per cent fall in engagement after disruption. By method, registrar blocks and website suspensions produced the largest average fall at 91 per cent each, ahead of GEO IP blocking at 60 per cent, Bing removal at 52 per cent, Google removal at 30 per cent and Facebook removal at 8 per cent. The Commission's own conclusion is that search-engine removal makes a site harder to find but does not fully block access.

The volume has grown sharply. In July to September 2026 the Commission referred 1,835 websites to search engines, representing 7,677,211 URLs, and issued 546 cease and desist notices, against 0 or 1 prosecutions commenced in every quarter from April 2025 to March 2026. Action against sites is fast, cheap and mostly administrative; action against people is rare.

How many people are actually there is a matter of method, and the methods disagree. The Commission's analysis published 5 November 2026 estimates that across the whole population, including non-gamblers, 0.6 per cent of respondents engaged with illegal gambling websites in the past four weeks and a further 0.4 per cent in the past 12 months, while 94.4 per cent showed no indication of using one; among those who had gambled online in the past four weeks, it estimates 2.5 per cent had engaged with illegal sites. H2 Gambling Capital puts stakes with illegal operators at £16.6 billion in 2025, up from about £5 billion in 2019. A Frontier Economics study for the Betting and Gaming Council estimated £2.7 billion staked annually online on the black market. Yield Sec, for the Campaign for Fairer Gambling, put 9 per cent of the online market outside regulation in 2025. The Commission's own October 2024 methodology notes it does not capture activity hidden by VPNs.

For context, the legal market is not small. Total Great Britain gross gambling yield was £17.5 billion in the year to March 2026, up 4.4 per cent, with the remote casino, betting and bingo sector at £8.3 billion. Online slots alone generated £773 million in January to March 2026, on 25.1 billion spins.

The Terms That Build In Delay

Deliberate delay has a grammar, and once you have seen it you cannot unsee it.

The first form is the staged identity check: no verification at sign-up, a request for a passport and a utility bill at the moment of withdrawal. The Commission's August 2026 blog reported that over a quarter of complaints reaching its Contact Centre concern identity verification, and the Annual Report and Accounts 2024-25 states that withdrawal issues continue to be the cause of most complaints received.

The second is the queue: one withdrawal at a time, with no further request permitted until the first is authorised. That exact term was found unfair under the Consumer Rights Act 2015 and formed part of the £900,000 settlement one licensee agreed on 21 October 2026, alongside manual review of every fifth or tenth withdrawal for some customers.

The third is the cap: a maximum cashout on bonus winnings, a maximum bet while wagering, a maximum monthly withdrawal on a deposit balance. Offshore terms publish these plainly. One operator caps the maximum bet while wagering at €5 for regular players and €10 for VIP players, and states that breaching the max bet rule may result in account closure, forfeiture of the bonus and any winnings generated during wagering.

The fourth is the undefined prohibition: terms punishing "bonus abuse", "low-margin, equal or zero-risk bets" or moving between weighted games, with the operator reserving sole discretion. British guidance requires that promotional play restrictions specify all prohibited types or patterns of play and not reserve sole discretion, and requires anti-fraud terms to sit in separate clauses from promotional terms. Offshore, the two are often merged into one sentence — which is precisely the drafting that makes a complaint unwinnable.

Understanding the Real Cost of Mobile Deposits

Set the payment rail aside and the arithmetic is simple. A phone-bill deposit on an unlicensed site buys a claim against a company that holds no British licence, answers to a regulator with a fraction of the Gambling Commission's powers, and faces no deadline on a payout. The reverse of that coin is worth stating: the deposit also buys a debt on a phone account, or a credit line, payable whether or not anything was won.

Meanwhile the British version of the same product has been tightening. Since 19 January 2026, wagering requirements on bonus funds are capped at ten times and mixed-product promotions are banned, the cap chosen after the Commission judged that a limit "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements". Since 31 October 2025 every gambling business must prompt a customer to set a financial limit before their first deposit, present that as the default option under RTS 12E, and offer it through a free-text box at account level. Financial vulnerability checks arrived in August 2024 at £500 net deposits over 30 days, dropped to £150 on 28 February 2025, and Financial Risk Assessments will be staged in from the largest operators, beginning at £5,000 net deposits in a rolling 24 hours for customers aged 25 and over. Slot stakes are capped at £5 per game cycle, or £2 for 18- to 24-year-olds — limits attached to every remote casino operating licence and simply absent offshore.

The fraud picture is not improving either. The Commission's 2026 risk assessment rates the remote casino sector as high risk for money laundering, unchanged, and reports an increase in the scale and sophistication of attempts to bypass customer due diligence using false documentation, deepfake videos and face swaps generated by AI.

Two closing cautions, because both come up every time this subject does. First, exclusion is a fact with a duration: a GamStop registration cannot be cancelled during its term, and it continues after the chosen period until the person contacts GamStop to remove it — and an operator using a middle name instead of a forename at sign-up creates mismatches with records held elsewhere, such as GamStop, undermining the block's effectiveness. Second, help does not depend on the operator. The National Gambling Helpline is free on 0808 8020 133, 24 hours a day, every day of the year.

The register is the same size it has always roughly been — 614,738 consumers on GamStop Online as of July 2026, of whom more than one in two had chosen the maximum five-year exclusion — and the deficit this market trades on is the difference between a promise and a licence. It is worth knowing exactly which one the balance is standing on.

Common Questions About Mobile Casinos Outside GamStop

Is a mobile casino not on GamStop legal to use?

Using one is not an offence for an adult in Britain. Section 33 of the Gambling Act 2005 makes it an offence to provide gambling facilities without an operating licence, and the Act's general offences attach to those who provide facilities, not to consumers. The operator is the one committing an offence; the player's exposure is financial and practical, not criminal.

Can I set up a pay by mobile casino not on GamStop while self-excluded?

Technically a person may be accepted, because GamStop's obligations apply only to operators licensed in Great Britain and — as trade and press sources state, consistent with GamStop's own terms [unconfirmed] — offshore sites are not connected to the register. That makes an offshore site a way round the consequences of breaching an exclusion, never a neutral choice. The exclusion holds for its full term and remains until the person contacts GamStop to remove it.

Where does my money sit after a mobile deposit casino not on GamStop?

It sits with the operator, as a claim rather than a protected asset. British licence conditions require customer funds in a separate client account, one of three insolvency ratings disclosed in the terms, a six-month reminder if funds are "not protected", and a ban on payment methods outside the Payment Services Regulations 2017. Remove the licence and every one of those obligations disappears.

Why does a pay with mobile phone bill casino not on GamStop pay out so slowly?

Because slowness is a business decision that carries no penalty offshore. British rules forbid requiring extra information at withdrawal that could reasonably have been sought earlier and forbid friction that appears only when money leaves rather than when it arrives; the Commission says there is no valid reason to delay a payout where it has no regulatory concerns. Offshore, manual review has no clock attached to it.

What does the regulator's own withdrawal data show?

That licensed withdrawals are not the problem people fear. Covering June to September 2024, Commission data records 44.2 million withdrawals by customers of large online operators, with 96.3 per cent clearing automatically, 3.5 per cent within 24 hours and 0.1 per cent taking up to 48 hours. Complaints coded to withdrawals and financial transactions fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025.

Are the accounts actually checked for identity?

Not reliably, and that is the point. British licence condition 17 requires identity verified before a customer is permitted to gamble, with the Commission expecting checks brought forward rather than at withdrawal. Offshore, verification timing is a commercial choice, and it tends to arrive at the exact moment the player wants money back, when a request for documents is hardest to refuse.

What A Phone Bill Is Really Buying

A mobile casino not on GamStop sells convenience and pays for it with the only thing a licence really buys a player: somebody to answer to — which is why the number worth remembering is 0808 8020 133, free from GamCare's National Gambling Helpline, 24 hours a day, every day of the year.