Gambling Not on GamStop and What the Exclusion Scheme Covers

Gambling not on GamStop means an operator with no Gambling Commission licence, so the national self-exclusion scheme has no hold over it. UK protections — payout rules, bonus caps, the credit card ban, ADR — do not reach these sites. GamStop still covers every site licensed in Great Britain.

The scheme's own name is often typed "gamestop", which is a slip and nothing more; on the register it is GamStop. I have spent years reading the paperwork around this industry and the numbers still surprise me. At the end of 2025 there were 561,983 active exclusions on the register, and by July 2026 the figure published was 614,738 — with more than one in two of those people choosing the maximum five-year term. That is not a market of people looking for a loophole. That is a market of people who have deliberately shut a door, and the interesting question is what happens to the wall around it.

Because the register only covers part of the wall. Every operator holding a Gambling Commission licence must be part of GamStop as a condition of that licence — social responsibility code provision 3.5.5, in force since 31 March 2020 — and must check its whole customer base against the register at least every 24 hours. Offshore operators owe the Commission nothing, so they sit outside it. Section 33 of the Gambling Act 2005 makes it an offence to provide gambling facilities in Great Britain without an operating licence, and the Commission says plainly that holding a licence somewhere else does not change that. Everything below is about how a person actually reads that gap: what an offshore licence is worth, what an operator's terms build in, and which checks separate a serious business from a rented banner.

None of this is advice about anyone's own gambling. It is a description of a market, and the market can be read from the outside.

If gambling is causing harm, the National Gambling Helpline on 0808 8020 133 is free and open 24 hours a day.

How Self-Exclusion Works, and What the Term Actually Is

GamStop is not a block on one account. It is a block on a person, sitting under every licensed operator at once. Registration takes a few minutes and can take up to 24 hours to bite. The terms run for 6 months, 1 year, 5 years or 5 years with auto-renewal.

Once registered, the registration cannot be cancelled or deactivated during the exclusion period. That is the part people misread. The exclusion does not quietly lapse on the last day of the chosen term; it stays in place after the end of that period unless the person contacts GamStop to remove it. Under the terms of use, the auto-renewal option can only be switched off during the last six months of a five-year minimum exclusion period, and auto-renewal otherwise continues for up to four further five-year periods. If nobody deactivates anything, GamStop holds the data through a further automatic seven-year self-exclusion period during which operators are told the person was previously excluded.

The composition of the register is worth a look, because it says something about how people use it. Of the periods chosen by registrants in 2025: 29 per cent took six months, 24 per cent a year, 25 per cent five years and 22 per cent five years with auto-renewal. Under-25s were nearly one in three of all registrations in the first half of 2026, a 26 per cent year-on-year rise, and the 2025 annual report recorded the gender split at 94.3 per cent male to 5.7 per cent female.

The land-based schemes work differently and are often confused with the online one. SENSE covers licensed casinos, enrolment online or in person, with a six-month minimum extendable to twelve months from the enrolment date and a six-month "Thinking" period before removal can be requested — in person, at a casino, to a manager, followed by a 24-hour cooling-off period. GamStop Betting Shops, the scheme formerly known as MOSES, runs by telephone on 0800 294 2060 for a fixed 12-month term that cannot be ended early. In the year to 1 April 2026 the Commission's FOI response put SENSE at 12,445 active self-excluded customers and the betting shops scheme at 9,075.

For online, the licence condition does the heavy lifting. The Commission suspended the licences of two operators in April 2020 — Dynamic, an operator, and Sportito — under section 118(2) of the Gambling Act 2005 for failing to integrate the scheme by the 31 March deadline. That is the standard. It applies to licence holders and to nobody else.

Gambling Sites Not on GamStop and How the Gap Opens

The arithmetic of the gap is simple. The scheme binds participants, and participation is a licence condition, so an operator without a UK licence is not a participant — as a matter of what the licence requires rather than what the scheme might wish. The Gambling Commission's own guidance says GamStop blocks access to gambling websites and apps licensed in Great Britain only, and that it cannot prevent access to services run by organisations that do not participate. The Commission's Illegal Markets team has been working the consequence since April 2024: 3,140 cease and desist and disruption notices, 447,778 Bing and Google URLs referred, 287,961 URLs removed, and an average 32 per cent fall in engagement across 160 illegal gambling websites after disruption.

The market intelligence on scale is contested, and it is worth saying so rather than quoting the biggest number. H2 Gambling Capital put stakes with illegal operators at £16.6 billion in 2025. Frontier Economics, working for the Betting and Gaming Council, estimated £2.7 billion staked annually online on the black market — 2.1 per cent of the £128 billion staked with regulated remote casino, betting and bingo operators. The Commission's own survey work published 5 November 2026 is more modest again: among people who had gambled online in the past four weeks, 2.5 per cent had engaged with an illegal gambling website, with a further 1.5 per cent in the past twelve months. Industry-funded research finds larger numbers than the regulator's survey does. That is not a coincidence, and a reader should price it in.

What the Commission is clear about is who these sites attract. Its warning notice of 20 January 2025 noted that unlicensed websites available to GB consumers often target customers who have self-excluded via GamStop, and may have inadequate social responsibility and anti-money-laundering controls. On the register side, an exclusion holds for its full term and then stays in place until the person contacts GamStop to remove it — so the "targeting" is aimed at people who have made a decision, not at people whose term has run out.

Gambling Sites Not on GamStop UK and Reading the Licence

An offshore licence is a real document and a weaker promise. The question is not whether it exists but what it obliges the holder to do, and what happens when the holder ignores it.

Curaçao is the clearest case study because it is mid-reform. The National Ordinance on Games of Chance took effect on 24 December 2024 and made the Curaçao Gaming Authority the direct licensing and supervisory authority, ending the master-licence model; the legacy "orange" sub-licence certificates of operation ended on 15 October 2025. The four former master licensors stopped licensing on staggered dates across 2024 and early 2025. Operators holding a valid licence at the changeover got a six-month provisional licence, extended once to 24 December 2025. The CGA's own certification policy says a Certificate of Operation Seal must redirect to the official CGA certification portal, that a certificate showing a different domain from the site being visited belongs to another operator, and that a historic /JAZ number must not be treated as proof of a current licence. Fees are published too: EUR 4,592 one-time application for a B2C licence, EUR 47,450 total annual, payable by 15 January.

Anjouan publishes a fee schedule of EUR 17,828 for B2C issuance and the same for annual renewal, and states that its licences contain no territorial restrictions under Anjouan law while holders must comply with local law where they operate. An ABC News investigation published 31 December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around EUR 17,000 each per year, and that Comoros financial intelligence officials described Anjouan Corporate Services as operating illegally. A former attorney-general of the Comoros called the licensing entity "an illegal entity", and the report said the AOFA lost recognition as a regulator under Comorian banking laws passed in 2013 and 2015. Anjouan Gaming's own statement of 10 June 2026 conceded the general point: a licence is not "a universal authorisation to operate in every country in the world". The legal opinion the industry quotes — a law firm regulated in England and Wales and Quebec reconfirming the authority's lawfulness — is reported by licensees themselves and should be read as such.

Kahnawà:ke is the oldest of the offshore regimes, regulating interactive gaming since 1999, with operators hosted at a data centre in the Mohawk Territory and permits held through a Client Provider Authorization structure. Its rules are unusually concrete: a player who breaches a self-exclusion prohibition forfeits deposited or won funds to a charity chosen by the Commission, and there is a full-time Dispute Resolution Officer. Its fees are rising on 1 January 2027 — the CPA application fee from USD 35,000 to USD 40,000.

Malta is the one offshore regime most people have actually heard of, and it is worth being precise: an MGA B2C licence requires a Maltese or EU/EEA entity, carries a one-time EUR 5,000 application fee, a fixed EUR 25,000 annual fee and 5 per cent gaming tax on revenue generated, and requires EUR 100,000 paid-up share capital for Type 1 and 2 licences. The MGA also publishes a list of Unauthorised URLs, with entries carrying notice dates of 30 October 2026, precisely because sites misrepresent it.

And then Costa Rica, which is not a licence at all. It has no comprehensive gambling licensing regime; the "data processing license" sometimes quoted is not a licence in the legal sense; the bill that would have created a mandatory regime, No. 25,057, was rejected in early 2026. Games of chance relying primarily on luck are generally prohibited there and are not to be marketed to Costa Rican residents.

## Offshore Licences Compared by What They Require

The column that matters is the last one. None of these licences puts an operator inside the Gambling Commission's regime, and none of them joins the operator to the self-exclusion scheme.

Identity Checks for Gambling Not on GamStop

If one mechanism decides whether an offshore account is workable, it is identity verification. How it works the first time and later is not a detail; it is the whole design.

In the UK the rule is upfront. Licence Condition 17 has required, since 7 May 2019, that a licensee obtain and verify information establishing a customer's identity before that customer is permitted to gamble, and 17.1.1 requires that information to include name, address and date of birth. The Commission expects checks brought forward to before a deposit, and has said onboarding on incomplete or inaccurate information — initials instead of full names, nicknames, commercial addresses instead of residential — is not sufficient. Companies can often verify by matching against credit reference and electoral roll databases with no documents at all; where documents are needed, passports, driving licences and household bills are the ordinary currency, and a selfie may be requested where fraud is suspected.

Independence is the principle underneath. Under the money laundering regulations a "verify" step means checking against documents or information from a reliable source independent of the person being verified, and the Commission's guidance is blunt that remote casinos are non-face-to-face businesses and must treat that as higher risk without safeguards. This is why documents get asked for on a first deposit at some operators and only on a withdrawal at others.

Then there is what happens later. Licence Condition 17.1.1 states that a customer's withdrawal request must not result in a requirement for additional information if the licensee could reasonably have requested that information earlier — unless another legal obligation, such as an anti-money-laundering rule, requires it at that moment. Where a business delays a withdrawal because of insufficient ID it may breach the condition and face regulatory action. Over a quarter of complaints reaching the Commission's Contact Centre concern identity verification, a figure the Commission linked in an August 2026 blog to customers being asked for documents only when they try to withdraw.

The warning signs are recognisable. Documents demanded for the first time at the point of withdrawal; a request that does not name the legal basis; terms reserving sole discretion to void winnings; a verification provider's "fuzzy match" accepted at onboarding and then rejected at cash-out. The Commission also flags a subtler failure: onboarding a customer using a middle name instead of a forename can create mismatches with records held elsewhere, including GamStop, which undermines the exclusion scheme itself.

Two facts keep this in proportion. The Commission's data for June to September 2024 covered 44.2 million withdrawals from customers of large online operators; 96.3 per cent cleared automatically and 3.5 per cent within 24 hours. And the CMA has been clear that operators cannot confiscate a customer's funds because ID has not been provided. Deposit balances remain the customer's. The Commission has no fixed maximum number of days for a payout — the regime relies on the fair-and-open condition 7.1.1, Condition 17.1.1 and the unfair terms rules instead. Which is exactly why terms matter more than timers.

Five Signs of a Serious Gambling Operator

"Trustworthy" is not a moral category in this trade; it is a set of things you can check in ten minutes. Here are the five I would check.

The licence is checkable, and checking it proves something specific

Every serious regulator publishes something you can look up. The CGA requires a Certificate of Operation Seal to redirect to cert.cga.cw, and says a certificate displaying a different domain from the site being visited belongs to someone else. Anjouan says certificates carry a unique licence number and a QR code linking to a public register, and that certificates that cannot be verified through the register should not be relied upon. Malta publishes an Unauthorised URLs list with October 2026 entries because sites invoke the MGA without authority. Quick check: click the seal and see where it actually goes, then match the domain on the certificate against the address bar.

The withdrawal terms do not build in delay

A term is where delay hides. Licence condition 17.1.1 exists because asking for documents only at cash-out is the oldest trick in the book, and the Commission found in a 2026 blog that over a quarter of its Contact Centre complaints were about identity verification on withdrawal. In October 2026 a regulatory settlement of £900,000 covered failures including unnecessarily delaying consumer withdrawals — among them a term allowing only one withdrawal at a time and a manual review of every fifth or tenth withdrawal. Quick check: read the withdrawal section for per-request limits, serial-only requests and "additional information may be required" clauses, and note whether the reason for any request is stated.

Customer funds are disclosed, with the rating stated

Under licence conditions 4.1.1 and 4.2.1 a business holding customer funds must keep them in a separate client account, must select one of three ratings — "not protected", "medium protection" or "high protection" — and must state which applies in its terms. An operator rated "not protected" must remind customers every six months that their funds are not protected on insolvency, stating the value held. Quick check: find the rating in the terms and confirm it is stated in words, not implied. A separate account is not a guarantee — and gambling businesses are legally allowed to hold customer money in overseas bank accounts.

Complaints go somewhere independent, free, and with time

A UK-licensed operator must let a customer refer an unresolved dispute to an approved ADR entity free of charge if eight weeks have passed — that is social responsibility code 6.1.1. Providers on the Commission's list include IBAS and eCOGRA; IBAS recorded 3,721 domestic disputes in 2024–25 with an average completion time of 20 days and reported 100 per cent operator compliance with decisions in the consumer's favour in both 2023–24 and 2024–25. Note the limits: ADR will not hear customer service complaints or refusals to accept a bet, and eCOGRA's report for 1 October 2024 to 30 September 2025 shows 361 of 499 invalid disputes had not been through the operator's own procedure first. Quick check: find the ADR provider named in the terms and confirm it appears on a regulator's approved list.

The bonus arithmetic is published, not implied

From 19 January 2026, UK-licensed operators cannot apply wagering requirements above ten times and cannot mix product types within one incentive. Offshore, 35x to 50x welcome wagering is ordinary, and the caps bite in other places: a maximum bet while wagering, a maximum cashout of 300 per cent of the bonus, bonus abuse clauses that void winnings. Quick check: add up the multiple, the game-contribution table, the max-bet rule and the cashout cap before playing anything. If the multiple is quoted as applying to bonus plus deposit, double it in your head.

How to Check an Offshore Site Before Depositing Anything

1. Verify the licence at the regulator, not on the site. Use the seal and follow it to the regulator's own domain, then match the certificate's domain name to the site in front of you. Reason: seals are copied, and a certificate belonging to another operator is the standard fake.
2. Map the operator's legal address against the licence's jurisdiction. An entity registered in one country claiming a licence issued in another needs explaining, and under section 33 knowledge of use in Great Britain is enough for the offence. Reason: the corporate paperwork is where misrepresentation shows first.
3. Read the withdrawal and verification terms in full. Look for per-request limits, sequential-withdrawal rules, unspecified "additional documents", and any term letting the operator void winnings at its discretion. Reason: this is where the friction is designed in, and where the Commission's own enforcement has landed.
4. Check the customer-funds rating and where the money is held. Find the words "not protected", "medium protection" or "high protection" in the terms, and note the bank jurisdiction. Reason: on insolvency, a rating and a foreign account are the difference between a queue and a loss.
5. Find the dispute route and test the deposit limits. Locate the named ADR provider or equivalent and ask what the operator's own complaints process is; set a deposit limit before the first payment, since UK rules make that a prompt but offshore terms may not. Reason: a written route out is worth more than a responsive live chat.
6. Layer protection outside the operator. Blocking software is the layer most people skip: BetBlocker states it blocks over 1,368,000 gambling websites and 3,100 apps, requires no registration and is free worldwide, while Gamban is free for residents of Wales but in England and Scotland costs £4.99 a month or £29.99 a year following the end of TalkBanStop funding on 31 March 2026. Bank gambling blocks from the Commission's October 2026 list — Bank of Scotland, Barclays, Halifax, HSBC, Lloyds, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling — decline payments under gambling merchant codes and must be activated on each card, with most banks applying a 48- or 72-hour cooling-off period. Reason: a tool that works on every site does not care which licence an operator holds.

The Real Cost of Using Unlicensed Gambling Sites

The cluster's real question is not which brands sit outside the scheme but what leaving the covered market gives up, because the answer is a list of concrete protections rather than a badge.

Here is what a UK-licensed operator must do that an unlicensed one need not. It must be part of GamStop and check its entire customer base against the register at least every 24 hours, and it must close any account belonging to someone who has self-excluded and return the funds held in it — the LCCP says it is not sufficient merely to stop the customer withdrawing while continuing to accept wagers. It cannot offer reverse withdrawals: RTS 14B, in force since 31 October 2021, states that consumers must not be given the option to cancel a withdrawal request. It must prompt a financial limit before the first deposit under changes effective 31 October 2025, must not impose any maximum limit on withdrawals from a deposit balance, and must give the customer access to free ADR after eight weeks.

Then the wider rulebook. Credit cards have been banned for gambling since 14 April 2020 under licence condition 6.1.2, and licence condition 5.1.2 requires payments to GB customers only from providers within the Payment Services Regulations 2017. Online slots stakes are capped at £5 per game cycle for all adults and £2 for 18 to 24s, in force since April and May 2025 under the 2025 Regulations, with a minimum 2.5 seconds between game cycles under RTS 14D. Financial vulnerability checks have been a requirement since August 2024, with the threshold lowered to £150 net deposits over 30 days from 28 February 2025. And the statutory levy introduced by the Gambling Levy Regulations 2025 — 1.1 per cent of previous-year GGY for online operators — raised just under £120 million in its first year, ringfenced for research, prevention and treatment, with 50 per cent going to treatment.

The enforcement record explains why those rules matter more than the licence's existence. In July 2025 an operator was fined £170,000 for failures including a bonus term stating it had the right at its own discretion to close accounts or forfeit winnings. In October 2026 a £900,000 settlement followed terms on withdrawals and fair treatment of customers.

None of this makes every licensed operator good. The Commission's 2026 risk assessment still rates the remote casino sector as high risk for money laundering, unchanged from the previous rating, and reports rising use of false documents, deepfake videos and face swaps to get through customer due diligence. What it means is that a licensed operator has something to lose. A regulator that has taken licences away — two in April 2020 for missing the integration deadline — is a regulator that can do it again.

Self-exclusion itself is straightforward, and never a round to be won. The exclusion holds for its full term and then remains in place until the person contacts GamStop to remove it. There is no early removal: the scheme's 2025 annual report devotes a section to its refusal to remove registrations before the chosen term ends. An offshore site is not a way around it, and treating it as one means staking at a business that is not licensed in Great Britain, where UK protections do not apply, and where the route to help is not a regulator.

Questions About Gambling Not on GamStop

What gambling sites are not on GamStop?

Any operator without a Gambling Commission licence — most of them holding a licence from Curaçao, Anjouan, Kahnawà:ke or Malta, and some holding nothing meaningful at all, since Costa Rica has no comprehensive gambling licensing regime and rejected the bill that would have created one in early 2026. The scheme binds only Great Britain licensees, so participation is a licence condition rather than a choice.

Why do gambling apps not on GamStop exist at all?

Because the obligation runs through the licence, not through the market. Social responsibility code 3.5.5 requires licensees to participate in the national multi-operator self-exclusion scheme, and a breach of a social responsibility code is a breach of licence condition by virtue of section 82(1) of the Gambling Act 2005. An operator with no Commission licence has nothing to breach. Its app store listing tells you nothing about exclusion.

Do best gambling sites not on GamStop some ranking?

Any ranking of these operators is a judgement about price and play, not safety, and the labels are usually paid for. What can be compared honestly is licence substance — the CGA's EUR 47,450 annual B2C total, Anjouan's EUR 17,828 renewal, Malta's EUR 25,000 fixed annual fee plus 5 per cent gaming tax, Kahnawà:ke's rising CPA fees — and terms. Those are facts. A "best" badge on an affiliate page is an advertisement with a table around it.

Can an offshore site see a GamStop registration?

No. The register is checked by operators licensed in Great Britain when someone opens or uses an online gambling account, and unlicensed operators are not connected to it. The Commission's warning notice of 20 January 2025 noted that unlicensed websites available to GB consumers often target customers who have self-excluded. That is not a service; it is a description of who the advertising is aimed at.

Do welsh gambling sites not on GamStop differ from the rest of the UK?

No — the Gambling Act 2005 and the Commission's licence conditions cover England, Scotland and Wales alike, so a GamStop registration blocks the same operators everywhere. What differs is the support line: callers in Wales are given 0808 2819 265 alongside the England and Scotland number 0808 8020 133. GamCare describes its hours as 24 hours a day, 365 days a year.

Do gambling companies not on GamStop pay out at all?

Many do, and promptly. That is not the difficulty. The difficulty is what happens when they do not: the Commission is a regulator and not an ombudsman, so it cannot resolve individual complaints or get money back, and an unlicensed operator joins no approved ADR scheme. Fewer than 3 per cent of accounts were expected to need a financial risk assessment, yet the 2024–25 annual report still records withdrawals as the largest source of complaints.

The Wall Only Goes So Far

Gambling not on GamStop is not a hidden corner of the internet; it is a licensing gap with a paper trail, and the paper trail is the most useful thing on the page — which regulator, which fees, which seal, which term, which ADR provider. Read those and the market sorts itself into two kinds of business: those with something to lose, and those without.

The number I keep coming back to is 614,738 — the people recorded on the register as of July 2026, more than one in two of them on a five-year term. Every one of those registrations holds for its full term and then stays in place until the person contacts GamStop to remove it. A site outside the scheme changes none of that. And if any of it starts to weigh, the National Gambling Helpline on 0808 8020 133 answers free, 24 hours a day.

As of 13.11.2026.