An online casino not on GamStop is one that holds no Great Britain licence, so it is not connected to the national self-exclusion scheme and is not bound by UK rules. Self-exclusion holds for its full term and then stays in place until the person asks GamStop to remove it. An offshore site is not a way round it.
The phrase itself is a small piece of misdirection. It sounds like a feature — a site with the guard rail removed, sold to anyone who types it. What it actually describes is a site that never had the rail fitted. It is often typed "gamestop", because the word "game" suggests itself, but the scheme's name is GamStop. And in the trade, "not on GamStop" is a category heading for one thing above all: an unlicensed operator, because the licence is what connects a site to the register. Everything on this page follows from one question, which is the question this whole site is built around: what protects a player's balance, and what does not.
On the numbers, the offshore market is real but far smaller than the interest in it suggests. The Gambling Commission's analysis published 5 November 2026 estimates that among adults who had gambled online in the previous four weeks, 2.5 per cent had engaged with an illegal gambling website, with a further 1.5 per cent doing so in the past twelve months. That is the population the "no GamStop" pitch is fishing in. Meanwhile the legal market turned over £17.5 billion in gross gambling yield in the year to March 2026, and it did so under a rulebook that offshore sites simply do not carry.
Offshore sites are not licensed in Great Britain. UK protections do not apply to money placed there. If gambling is causing harm, the National Gambling Helpline, run by GamCare, is free on 0808 8020 133, 24 hours a day, every day of the year.
Table of Contents12
- The Rule That Makes the Problem
- A Benchmark Worth Quoting
- UK Licence and Offshore Licence, Compared
- The Licence Is the Thing
- Five Signs You Can Check Yourself
- If You Are Weighing a Site Up
- When the Checks Are Asked For
- What the Offshore Pitch Leaves Out
- Not on GamStop, but Still Licensed in Britain
- What Happens to Money in an Unlicensed Site
- Questions Worth Asking Before the Register Is Checked
- The Short Version
The Rule That Makes the Problem
Self-exclusion in Britain is not a promise; it is plumbing. Since 31 March 2020, every online operator must participate in the national multi-operator self-exclusion scheme as a condition of its Gambling Commission licence — the requirement sits in social responsibility code provision 3.5.5 of the Licence Conditions and Codes of Practice, which states that licensees must participate. In April 2020 the Commission added the sharper half: operators must check their entire customer base against the register at least every 24 hours, which also stopped registered people receiving direct marketing.
That is why a licence matters to a player who has never been excluded. The same licence condition that forces operators to check GamStop also drags in the fair-terms rules, the withdrawal rules, the identity rules and the route to an independent adjudicator. Take the licence away and none of it travels with the website. The Gambling Commission has been blunt about the legal position: it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a licence from the Commission, and that includes operators holding a licence somewhere else. Section 33 of the Gambling Act 2005 carries, on summary conviction, up to 51 weeks' imprisonment, a fine at level 5, or both — six months in Scotland. The offence belongs to the operator, not the customer.
What the Commission can do about it is attrition rather than prosecution. Since April 2024 its Illegal Markets team has issued 3,140 cease and desist and disruption notices, referred 447,778 Bing and Google URLs and secured 287,961 removals. Across 160 illegal gambling websites with traffic data, engagement fell an average of 32 per cent after disruption. That is a real effect and an incomplete one: search-engine removal makes a site harder to find without blocking it, which is why the Commission rates GEO IP blocking and registrar blocks as the more effective tools. A site that keeps reappearing under a new domain is not evidence of resilience. It is evidence of the game being played.
A Benchmark Worth Quoting
The one figure worth carrying around is the Commission's own record of withdrawal speeds. For the four months from June to September 2024, large online operators processed 44.2 million customer withdrawals. Of those, 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours, and 0.1 per cent took up to 48 hours. That is the standard against which any offshore promise of "instant payouts" should be read — not because offshore sites are always slow, but because the UK figure is measured, published and auditable, and theirs is marketing copy.
It also explains why complaints cluster where they do. Problems with withdrawals were the single largest subject of complaints to the Commission's Contact Centre, which receives more than 6,000 calls a year, and by July 2024 the Commission still fielded around 2,000 complaints annually about withdrawal delays. Complaints coded "Withdrawals and/or financial transactions" did fall from 2,416 in the year to December 2022 to 1,791 in the year to December 2025 — progress, of a kind, on a problem that the regulator's 2024-25 annual report says remains the cause of most of the complaints it receives.
UK Licence and Offshore Licence, Compared
The comparison that matters is not brand against brand. It is the rulebook against the absence of one. The table below sets out what a Great Britain licence requires and what the common offshore arrangements offer in its place; every figure in the rows below appears again in the text around it.
| Criterion | Great Britain licence | Curaçao (LOK) | Anjouan | Kahnawake |
|---|---|---|---|---|
| Who supervises | Gambling Commission | Curaçao Gaming Authority, direct licensing since the LOK took effect on 24 December 2024 | Anjouan Gaming Authority, framework from 2005 legislation | Kahnawà:ke Gaming Commission, interactive gaming rules from 8 July 1999 |
| Operator fee signal | Statutory levy of 1.1 per cent of previous-year gross gambling yield for online operators | Annual B2C total of EUR 47,450, payable in full by 15 January | EUR 17,828 to issue and EUR 17,828 a year to renew | Client Provider Authorisation application rising to USD 40,000 on 1 January 2027, plus USD 20,000 a year |
| Self-exclusion link | Mandatory under social responsibility code 3.5.5, with daily checks | None | None | Commission-run scheme, described as permanent and irrevocable |
| Withdrawal rules | No reverse withdrawals since 31 October 2021; no withdrawal cap on the deposit balance | Not set by the authority | Not set by the authority | Player terms must be contractual and not unfair |
| Dispute route for a British player | An approved ADR provider, free of charge | CGA handles licensing, not player money | A designated ADR provider, most recently EGIS ADR, Axion ADR, iGaming ADR and an operator | A full-time Dispute Resolution Officer under the KGC |
| Player funds | Client account, plus a published insolvency rating, with six-monthly reminders if funds are not protected | Segregation required | Segregation required | Not stated in the public material reviewed |
Read the middle columns honestly and something becomes clear: offshore regimes are not lawless. Curaçao's reform is genuine and expensive — the legacy "orange" sub-licence certificates ended on 15 October 2025, and a historic /JAZ number is no longer proof of anything. Anjouan's published standards require segregated player funds, certified random number generators and AML controls. Kahnawake has regulated interactive gaming since before most of the current British rulebook existed. What none of them do is stand behind a British player's balance, because a British player is not their subject. They supervise the operator's conduct toward its licence, not the customer's remedy.
The Licence Is the Thing
If one mechanism carries the whole topic, it is the licence, because it is the only part of the arrangement that a player can check in thirty seconds. Everything else — the payout reputation, the bonus, the chat support — is downstream of it.
The first time a person checks, the method is the Gambling Commission's own: look up the business on the public register and see whether the site's activities and domain names match the licence listed. The register is the authority, not the badge. A footer logo is a picture. Domain names matter because a licence covers named domains; a company can hold a British licence for one site and run another without one. The second and third times, the same check takes ten seconds, and after that it becomes a habit rather than a task.
The warning signs run in the opposite direction. A licence claim with no jurisdiction named. A regulator whose website cannot verify the certificate number — Anjouan's own framework says certificates that cannot be checked against the public register should not be relied upon as evidence of licensing, and Curaçao's authority announced on 7 October 2026 that its previous online gaming portal would not return to service and that it is building a different way to verify licensed domains. A company name that changes while the design does not. Terms that mention the Gambling Commission in a complaints section while the site holds no British licence. And the tell that outranks the rest: a site that markets its absence from GamStop as a benefit, because no licensed operator would.
Five Signs You Can Check Yourself
The live register entry
Search the public register for the trading name and then check the domain list underneath it. A licence that names a different domain from the one being read is not a licence for that website. This is the single check that makes every other judgement easier.
A withdrawal term with no maximum
Look for any cap on what can be taken out of the deposit balance. In Britain, terms such as "you may withdraw up to £50 per day" are prohibited outright, and the Competition and Markets Authority's undertakings secured in 2019 from six operators included a commitment not to impose any maximum limit on the amount a consumer may withdraw. A low daily or weekly ceiling is the clearest published signal that the money is being held back.
Money moved in one direction
Reverse withdrawals — the option to cancel a pending payout and put the money back into play — were banned for all remote operators in Britain through requirement 14B, in force from 31 October 2021. A site that still offers a "cancel withdrawal" button is describing whose interests the design serves.
Where the complaint goes
There must be a named alternative dispute resolution provider, free to the customer, reachable after eight weeks or a deadlock letter. Under code provision 6.1.1, licensees must have arrangements for customers to refer a dispute to an ADR entity at no charge if it is not resolved within eight weeks. A site that answers complaints only with its own support team, or names a provider that will not take the case, has no remedy at all.
How quickly identity was asked for
The forward-looking operator asks before the first deposit; the backward-looking one asks when a withdrawal is requested. Licence condition 17.1.1 says a withdrawal request must not trigger a request for information the licensee could reasonably have asked for earlier. The Commission reports that over a quarter of complaints reaching its Contact Centre concern identity verification, and it has criticised onboarding customers on partial or "fuzzy matched" information — precisely the practice that produces a demand for documents at the moment of cashing out.
If You Are Weighing a Site Up
The steps below are ordinary, lawful checks. None of them require an account, a deposit or a decision to gamble.
- Check the regulator's register, not the site's footer. Look up the business and confirm the domain. A licence listing the wrong domain is not a licence for that site, and this is the only step that answers the question everyone actually wants answered: who supervises these people, and can I complain to anyone who will answer.
- Read the withdrawal page before the bonus page. Look for a maximum withdrawal figure, a processing timeline and whether the payout can be cancelled back into play. Terms come first because they decide what happens after a win, which is when a balance is most exposed.
- Walk the bonus terms to the end. Since 19 January 2026, British licensees cannot apply wagering requirements above ten times and cannot mix two or more types of gambling product in one incentive. Offshore multipliers are commonly quoted in the 35x to 50x range for welcome offers. A wagering figure is a statement about how likely the bonus is to convert into money.
- Find the dispute route and the cooling-off terms. A named ADR provider, free to the customer, is the difference between a complaint and a loss. eCOGRA, for its reporting year to 30 September 2025, ruled 17.8 per cent of completed disputes in the consumer's favour; IBAS reports 100 per cent operator compliance with decisions in the consumer's favour in both 2023-24 and 2024-25.
- Ask what happens to the money if the operator fails. British licensees must hold customer funds in a separate client account and publish an insolvency rating, reminded every six months if the rating is "not protected". Offshore, that disclosure often does not exist, and no rating means no answer.
- Add a layer that does not depend on the operator. Blocking software such as Gamban or BetBlocker, or a bank gambling block — the Commission's own list, last updated 16 October 2026, names eleven banks including Barclays, HSBC, Lloyds, Monzo, NatWest and Starling. These are installed at the phone or the card, which is the one place an offshore site cannot reach.
When the Checks Are Asked For
Nothing in this topic irritates players more than identity verification, and nothing is more routinely misread. So it is worth setting out how it works the first time and how it works later.
The British baseline is set by the Money Laundering Regulations 2017 and by licence condition 17. In a remote casino, identification and verification are triggered when deposits or withdrawals reach €2,000 or more, and the threshold counts linked transactions — the same customer, the same game, the same logged-on session. A remote casino may identify a customer at registration and defer full verification until that threshold, an approach the Commission calls the hybrid. But the Commission expects checks to be brought forward to before a customer deposits or stakes, and states plainly that onboarding on incomplete or inaccurate information — initials instead of full names, nicknames, commercial addresses — is not sufficient.
The second time is easier, and the reason is worth knowing. Verification usually runs by matching account details against databases such as credit reference agencies and the electoral roll, in which case no documents are wanted at all. Documents — passport, driving licence, household bill — appear when the match fails or the risk rises. What the regulator objects to is the sequencing: a withdrawal request must not become the first occasion on which documents are demanded, unless the operator is under a separate legal duty, such as an anti-money-laundering obligation, that only bites then.
The warning signs are about timing and reasonableness rather than paperwork as such. A demand for documents the operator could have requested at sign-up. A request for a selfie with no explanation, when the Commission's own material ties that to suspected fraud such as identity theft. A sudden source-of-funds interrogation on a first withdrawal after months of deposits without a word. And the loudest one: a term that lets the operator confiscate deposited money for a failure to verify identity, which British guidance prohibits and which the CMA's undertakings specifically ruled out for one operator in 2019. If the site holds no British licence, none of that protection exists, and the money simply stops being a complaint and becomes a loss.
What the Offshore Pitch Leaves Out
Look at the sites that advertise on this phrase and a pattern appears. The pitch is speed, no documents, no limits and no exclusions. What is missing from the same page is anything about what happens afterwards.
Take bonuses, because that is where the arithmetic is least forgiving. British licensees cannot apply wagering requirements above ten times. Offshore terms often run well past that, and the multiplier is only the beginning. Maximum cashout clauses, caps on the maximum bet while wagering, weighting tables that count slots at 100 per cent and roulette at 5 per cent, and abuse clauses that let the operator decide retrospectively that a pattern of play was prohibited — all of these decide whether a bonus ever turns into a balance. In Britain, guidance requires that terms setting out promotional play restrictions specify all prohibited types or patterns of play rather than reserving sole discretion to the operator. Offshore, the discretion is frequently the whole clause.
There is also the point the Commission made in its warning notice of 20 January 2025, about licensed operators' games appearing on unlicensed websites available to British consumers: such sites often target people who have self-excluded through GamStop and may have inadequate social responsibility and anti-money-laundering controls. That is the mechanism in one sentence. A register of excluded people is only useful to a site that has to consult it. A site that does not have to consult it does not have a gap in its protection. It never had any.
Not on GamStop, but Still Licensed in Britain
Worth separating, because it catches people out. Under the rules that apply to Great Britain, no operator licensed here can sit outside the national scheme — that is the point of code provision 3.5.5, and two operators had their licences suspended on 3 April 2020 for failing to integrate by the deadline. So a search for a UK online casino not on GamStop returns one of two things: an unlicensed site, or a site that is not entirely clear about which jurisdiction it holds. Both are answered by the same register check.
The land-based schemes are different and often confused with the online one. SENSE covers licensed casinos in Great Britain, with a minimum exclusion of six months extendable to twelve, and removal only in person at a casino during the six-month "Thinking" period that follows, after which a 24-hour cooling-off applies. Gamstop Betting Shops, formerly MOSES, is telephone-based, excludes a customer from named bookmakers' shops for a fixed twelve-month term that cannot be ended early, and works with over 60 operators across roughly 6,000 shops. The Gambling Commission's May 2026 response to a freedom of information request put active self-excluded customers at 12,445 for SENSE and 9,075 for the bookmakers' scheme over the year to 1 April 2026. None of these routes crosses into an offshore website.
The online register itself has grown persistently. GamStop recorded 117,756 new registrations during 2025 and held 561,983 active exclusions at the end of that year, among them 58,675 registrations in the final six months. In the first half of 2026 registrations rose 16 per cent year on year, with a record 12,236 sign-ups in May 2026, and by July 2026 the figure stood at 614,738 people currently on the register. More than one in two had chosen the maximum five-year term, and across all age groups only one in four had taken six months. Those choices are, in effect, a public verdict on what people think of the alternative.
What Happens to Money in an Unlicensed Site
Here is the part the phrase conceals most effectively. In Britain, a player's funds are supposed to be visible as funds: held in a separate client account, covered by one of three insolvency ratings the licensee must publish, disclosed in writing on the first deposit and after any change to the terms, with a six-monthly reminder if the rating is "not protected". Separate accounts do not guarantee money back if an operator fails — customer funds may lawfully sit in overseas accounts — but the disclosure does at least tell a player which category they are in.
Offshore, the same money is a contractual claim on a company registered somewhere the player has no standing. Curaçao requires segregation; Anjouan's published standards require it too. Neither gives a British customer a seat at the table, and neither authority exists to collect money on a customer's behalf. A wallet that cannot be verified against a public register has no one to verify it with.
Then the compounding risk: payment method. Britain banned credit cards for gambling from 14 April 2020, and licence condition 5.1.2 requires that British customers may pay only through a provider that is a payment service provider under the Payment Services Regulations 2017. Offshore, the card rails are frequently closed — which pushes players toward crypto and e-wallet routes where a mistaken transfer is final. Bitcoin's ten-minute average block time is a target, not a promise: a block arrives within any given ten-minute window only about 63 per cent of the time, and most exchanges wait for six confirmations before treating a transfer as settled. A TRC-20 USDT transfer burns roughly 13 TRX without staked Energy, and about 26 TRX to a new wallet. These are ordinary costs, and they are also money that has left the regulated system entirely, with no chargeback and no authority to appeal to.
Questions Worth Asking Before the Register Is Checked
Is an online casino not on GamStop legal to use?
The site is the one breaking the law, not the customer. Offering commercial gambling services to consumers in Great Britain without a Commission licence is illegal under section 33 of the Gambling Act 2005, and the Commission has said this applies even where the operator holds a licence in another jurisdiction. A player commits no offence by registering. The exposure is financial, not criminal.
Do offshore casinos pay out quickly?
Sometimes, and there is no way to know in advance, which is the actual answer. Against British-licensed operators' published record — 96.3 per cent of 44.2 million withdrawals cleared automatically between June and September 2024 — an offshore "instant payout" claim is unmeasured marketing. The reliable signal is the terms: any maximum withdrawal figure, any cancel-withdrawal button, any pending-period language.
Why does a UK online casino not on GamStop not exist?
Because the licence forbids it. Since 31 March 2020 all online operators must be part of the national self-exclusion scheme as a condition of their Gambling Commission licence, and must check their whole customer base against it at least every 24 hours. An operator licensed in Great Britain is therefore, by definition, on GamStop. If a site claims a British licence and independence from the scheme, one of those two claims is false.
What happens to a GamStop exclusion if it is not removed?
Nothing automatic in the player's favour. An exclusion stays in place after the chosen period ends unless the person contacts GamStop to remove it, and registrations cannot be removed early — the group's 2025 annual report devotes a section to refusing early removals. Where no deactivation follows, GamStop holds the data through a further automatic seven-year period during which operators are told the person was previously excluded.
Can a no-deposit bonus with free spins be worth taking?
Rarely, and the reason is structural rather than moral. A free-spins or no-deposit offer carries no risk to the player, which means the terms carry all of the value: wagering multipliers, game-weighting tables that count slots at 100 per cent and roulette at 5 per cent, and a maximum cashout clause capping what can ever leave. In Britain, wagering is capped at ten times and mixed-product offers are banned from 19 January 2026. Offshore, a 40x to 60x multiplier against a €50 to €100 cashout cap is common.
What actually protects a balance at an offshore site?
Almost nothing that a British player can enforce. There is no licence condition, no register check, no ADR provider, no customer-funds rating and no regulator with jurisdiction over the money. The honest answer is that the only protection at an unlicensed site is the operator's own commercial interest in paying, which is a promise, not a rule. Every check on this page is designed to be done before that distinction matters.
The Short Version
The whole phrase turns on a single misreading: that a site outside the national self-exclusion scheme is a site with the guard rail removed, when it is a site that never had one fitted, and the licence is the only part a player can check in thirty seconds. The figures show where the traffic actually is — 2.5 per cent of recent online gamblers, against £17.5 billion of legal gross gambling yield — and they show how quickly the ground shifts: 614,738 people on the register as of July 2026, more than one in two choosing the maximum five-year term. Those choices are made by people who looked at both sides of this market and picked the one with a rulebook. For anyone who wants to talk to someone rather than read a register, the National Gambling Helpline is free on 0808 8020 133, day and night, and the practical rule behind every check on this page stays the same: a balance is only as safe as the authority that can be asked to give it back.