Gambling Sites Not on GamStop and How Licensing Affects Speed

Gambling sites not on GamStop are offshore operators holding no Great Britain licence, so the national self-exclusion scheme does not reach them. UK-licensed sites must join GamStop and check every customer daily. Offshore sites face no such duty, no credit-card ban and no wagering cap — and, crucially, no protection if the money back out stalls.

The promise attached to these sites is a simple one: money in, money out, no scheme in the way. What I want to test on this page is the second half of that promise, because it is the half that fails quietly. The Gambling Commission's own figures on the fast, frictionless UK market — 44.2 million withdrawals across large operators between June and September 2024, of which 96.3% cleared automatically — describe a machine that offshore sites imitate in advertising and rarely match in operation. Strip away the licence and you strip away the licence conditions that made those numbers possible: the daily GamStop check, the ban on reverse withdrawals, the ten-times wagering cap that came into force on 19 January 2026, and the requirement that a withdrawal request must not suddenly generate a demand for documents the operator could reasonably have asked for earlier. What is left is a contract with a company in another jurisdiction, adjudicated by arbitrators that operator chose, measured in days rather than seconds. This article looks at the whole field — the grey market, the licence shopping, the identity checks that decide whether anyone ever sees a penny. It keeps coming back to one question: how fast, and how reliably, does the money come back? As of 13.11.2026 that question has better answers than the marketing suggests and worse ones than the marketing admits.

What a "Not on GamStop" Site Actually Is

Strip the phrase down and there is nothing exotic in it. GamStop Online is the UK's national online self-exclusion scheme, run by The National Online Self Exclusion Scheme Limited — a company, not a regulator — and it was established in June 2017 by the Remote Gambling Association at the request of what was then the Department for Digital, Culture, Media and Sport and the Gambling Commission. It went live on 27 April 2018. Since 31 March 2020 every online operator licensed in Great Britain has had to be part of it, because the Commission wrote the duty into its Licence Conditions and Codes of Practice at social responsibility code provision 3.5.5: "Licensees must participate in the national multi-operator self-exclusion scheme."

A site not on GamStop is therefore, by definition, a site that is not licensed in Great Britain. It is often typed "gamestop" — the word "game" suggests itself, and the slip is common enough to be worth spelling out once.

The scheme's reach stops exactly where the Commission's does. GamStop Online blocks access to gambling websites and apps licensed in Great Britain only, and it cannot prevent access to services run by organisations that do not participate. Offshore sites holding no Commission licence sit outside it entirely, since the obligations attach only to UKGC licensees — a point stated by trade and press sources rather than on a primary regulator page, though it is consistent with GamStop's own terms of use. That is the whole of the "not on GamStop" category: not a loophole, not a feature, just an absence of a licence.

It matters that this is a two-way absence. These operators give up the UK licence and with it every protection built on top of it: daily customer-base screening, the April 2020 rule that stopped registered people receiving direct marketing, and — for anything to do with money — the terms rules, the credit-card ban since 14 April 2020, and the ten-times wagering cap in force since 19 January 2026. It is legal to operate, advertise and be taxed in Curaçao, Anjouan or Kahnawà:ke. It is illegal under section 33 of the Gambling Act 2005 to provide facilities for gambling to consumers in Great Britain without a Commission licence, and the Commission said as much in October 2024, adding that this includes the case where the operator holds a licence in another jurisdiction. The offence is the operator's, not the player's. There is no penalty waiting for the customer. There is, equally, nobody standing behind the customer.

What gambling sites are not on GamStop in practice

The honest answer is: several hundred, and the count moves weekly. Commission analysis published on 5 November 2026 found 586 illegal gambling websites accessible to consumers in Great Britain identified in September 2026 — 4% fewer than the previous three-month average, and 4% more than September a year earlier. Disruption took some of them off the board: 311 sites had action taken against them in the second quarter of 2026 to 2027, 38% more than the previous quarter, and 77% of the disrupted sites showed a fall in estimated traffic. That is a churn, not a cleanup.

An aggregator reading Curaçao's public register reported 704 licences held by 698 operators, 552 of them active, in a read at 03:30 UTC on 6 November 2026 — a third-party tracker, not a Curaçao Gaming Authority publication, and worth that caveat. Three registers dominate what consumers see. Curaçao licences are the most numerous. Anjouan has been the growth story: ABC News reported on 31 December 2025 that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around €17,000 each per year. Kahnawà:ke is the old-timer, regulating interactive gaming since its Regulations took effect on 8 July 1999.

Volume tells you where the alphabet of the market sits, not where it is safe. The Commission issued an industry warning notice on 20 January 2025 about casino games supplied by licensed operators turning up on unlicensed sites available to GB consumers, and said in terms that those sites often target people who have self-excluded through GamStop. Whatever else a "not on GamStop" site is, that is the traffic it is built to catch.

How to Read a Licence Seal

Most people never check a licence. The check takes about ninety seconds, and it is the only thing on this page that changes the odds rather than describing them.

The Commission maintains a public register and advises consumers to click through to it and confirm that the site's activities and domain names match what the licence actually covers. A UK licence that covers bingo does not cover a casino. A licence that names one domain does not cover its sister. The register is the boring answer, and it is the one with the fewest surprises.

Offshore, seals multiply faster than licences. Curaçao's reform is the useful case study, because it shows how a seal can outlive its meaning. The National Ordinance on Games of Chance took effect on 24 December 2024 and made the Curaçao Gaming Authority the direct licensing and supervisory authority, replacing the old master-licence and sub-licence model. The legacy "orange" certificates of operation ended on 15 October 2025. Licensing ceased for four former master licensors on dates ranging from 18 August 2024 to 31 January 2025. A historic /JAZ number or legacy seal must not be treated as independent proof of a current Curaçao licence. Operators licensed when the law took effect received a six-month provisional licence by operation of law, due to expire on 24 June 2025; the CGA extended those by a further six months to 24 December 2025, with full compliance required for a full licence. And on 7 October 2026 the CGA said its previous online portal would not return to service and that it was working on an alternative way to verify licensed domains, because the old digital seal may be affected by the transition.

So the seal on the page is not evidence. The register behind the seal is. The CGA publishes two separate seals — a Certificate of Operation Seal, issued only to B2C operators for an approved player-facing domain, and a License Certificate Seal, available to B2B and B2C entities and not domain-specific. Clicking a Certificate of Operation Seal must redirect to the Curaçao Gaming Authority certificate portal. If it differs in design, colour or format, the site is not authorised. If the certificate behind it displays a different domain from the one being visited, the site is showing another operator's certificate and should be treated as unauthorised or fraudulent.

Anjouan's equivalent is a unique licence number and a QR code linking to a public register, and Anjouan Gaming's own framework states that a certificate which cannot be verified through the register should not be relied on as evidence of licensing status. Kahnawà:ke has run a Logo Certificate Program since 15 January 2010 that generates a Certificate of Good Standing. All three registers work. All three are also several jurisdictional time zones away from anyone who might answer a complaint.

What Each Licence Delivers at Withdrawal Time

Numbers here are the published figures, not estimates. They are the reason a careful reader stops treating offshore licences as interchangeable. The comparison is by licence, not by brand, and every figure below appears in the text around it.

Run the numbers as a player would. Curaçao's total annual cost, €47,450, buys about two and a half Anjouan renewals. Anjouan's entry price is roughly four times Curaçao's application fee. Neither price is a measure of anything a player cares about. What the player gets from the money is a regulator that exists, and what the player does not get — from any of the four — is the structure that produced 96.3% automatic clearance in the GB data.

The cost of a licence, and what it buys

The Gambling Commission's regime has a different arithmetic. Online operators pay a statutory levy of 1.1% of previous-year Gross Gambling Yield, under regulations that commenced on 6 April 2025, replacing the voluntary system; in the year reported, the levy raised just under £120 million, ringfenced for research, prevention and treatment. That money buys an NHS treatment system. The Commission reported in February 2026 that integrated care boards commission eight regional NHS gambling services receiving almost 5,000 referrals a year, well above the 3,000 targeted, and 15 specialist clinics had opened in England since 2019. Curaçao's €47,450 buys supervision. Anjouan's €17,828 buys a certificate. Costa Rica, which rejected Bill No. 25,057 in early 2026 — a bill that would have introduced mandatory licensing — buys nothing at all, and the "data processing license" sometimes cited for it is not a licence in any legal sense.

That is not an argument that GB-licensed sites are saintly. It is an argument that the money has somewhere to go. When the Commission fined an operator for a bonus term letting it "at their own discretion" close accounts or forfeit winnings — £170,000 in July 2025 — the fine was possible because a rule existed to break. Offshore, the equivalent clause is simply the contract.

Getting Paid Out

Everything about these sites reduces to one mechanism, and it is not the game, the odds or the welcome offer. It is what happens between pressing withdraw and seeing cleared money.

How it works the first time

Deposits are frictionless almost everywhere, and that is deliberate. The friction sits on the other side. A GB-licensed operator must obtain and verify information confirming a customer's identity before that customer is permitted to gamble, under Licence Condition 17, which has applied since 7 May 2019 and requires name, address and date of birth as a minimum. Many do it invisibly, matching the account against credit reference databases and the electoral roll. Offshore, the pattern is often reversed: accept the deposit, take the bets, and raise the identity question only when the balance is heading out of the door.

The anti-money-laundering threshold matters here. Under the Money Laundering Regulations 2017, in remote casinos identification and verification are required when a customer deposits funds to take part in remote gambling, or withdraws such funds or winnings, amounting to €2,000 or more — and the threshold covers linked transactions, not just a single one. Transactions count as linked if, for example, they form part of the customer's activity during a single logged-on period. A GB operator is expected to bring those checks forward, to before a customer deposits or stakes, and the Commission has said plainly that onboarding on incomplete details — initials instead of full names, nicknames, commercial addresses instead of residential — is not sufficient. A middle name in the wrong field can create a mismatch against another database, and the Commission has named the consequence: it can undermine self-exclusion itself.

The first withdrawal, then, is usually the one that triggers documents: a passport or driving licence, a household bill, sometimes a bank statement to establish source of funds, occasionally a selfie where fraud is suspected. Copies of official documents count as an independent source even when the customer supplies them. The Commission says it cannot give a timescale because the process varies — instant if electronic verification works, longer if documents are requested. Offshore there is no rule compelling the operator to have asked earlier, and no eight-week clock running toward anything.

How it works the second time — and every time after

Once verified, a GB account usually clears withdrawals automatically. The Commission's data for June to September 2024 recorded 96.3% of 44.2 million withdrawals across large online operators clearing automatically, with 3.5% within 24 hours and 0.1% taking up to 48 hours. Earlier data from some of the largest firms showed around 99% of withdrawal requests approved, processed and fulfilled within 24 to 48 hours. Repeat payouts in that regime are dull, which is the point.

The rules that keep them dull are specific. Reverse withdrawals have been permanently banned since 31 October 2021, under requirement 14B: "Consumers must not be given the option to cancel their withdrawal request." Operators may not impose a maximum limit on what a customer may withdraw from their deposit balance, and the Commission's own example of a prohibited term is "You may withdraw up to £50 per day and up to £500 per week." Un-staked deposits remain the customer's. Inactivity cannot be used to confiscate a balance. Licence condition 17.1.1 states that a withdrawal request must not result in a requirement for information the licensee could reasonably have requested earlier, though that does not stop a request the operator must make under another legal obligation, such as AML rules. And where an operator has no regulatory concerns about a customer, the Commission says there is no valid reason to delay the payout, and operators should explain any delay or refusal — subject to the tipping-off prohibition.

None of that exists offshore as an enforceable rule. There is no LCCP, no condition 17.1.1, no eight-week path to an approved ADR provider. There is also, in fairness, no reverse withdrawal button at most offshore sites — that particular trap is mostly gone everywhere. What remains is discretion: how long a manual review takes, whether the fifth withdrawal of a month is flagged, what "verification" means on a given afternoon.

The warning signs on the payout side

The pattern is recognisable, and it is not subtle. A site that takes deposits in seconds but quotes "up to 72 hours" or "5 to 10 business days" for a withdrawal is telling the truth about its priorities. So is a site whose terms give it sole discretion to void or withhold winnings: the Commission's guidance says terms using "may" or "reserve the right" in that way are unfair under the Consumer Rights Act 2015, and a GB operator was penalised in October 2026 for a term allowing only one withdrawal at a time, along with manual review of every fifth or tenth withdrawal for some customers. Offshore, the same machinery runs without the penalty.

Watch too for a maximum cashout clause. One offshore operator's terms reserve the right to limit winnings generated with bonus funds, including free spins and cashback, to 300% of the credited bonus amount, with any excess voided. In the UK that would collide directly with the prohibition on limiting withdrawals from the deposit balance. And watch for verification demands that arrive only after a win, for withdrawal fees that were not quoted at deposit, and for a register entry that names a different domain from the one on the browser tab.

Five Signs an Offshore Operator Can Be Judged On

These are the checks worth doing before the first deposit, and they are the same checks that predict what a withdrawal will feel like. Each takes minutes.

The licence is verifiable on the regulator's own register

Not a seal image, not a badge in the footer: the register. Click the certificate and follow it. A Curaçao Certificate of Operation Seal must redirect to the Curaçao Gaming Authority certificate portal, and the domain on the certificate must match the domain in the address bar. Anjouan certificates carry a licence number and a QR code linking to a public register. Kahnawà:ke is checked through the Logo Certificate Program, which returns a Certificate of Good Standing. If the seal leads nowhere, or to a different operator's certificate, the check has answered itself. Anything with a historic /JAZ number and nothing newer has answered itself too.

The terms state who holds the money and what happens if the company fails

A GB-licensed operator must state in writing whether customer funds are protected in the event of insolvency, at what level — "not protected", "medium protection" or "high protection" — and by what method, with the customer acknowledging before using funds for gambling and again after any change to the terms. An operator rated "not protected" must remind the customer every six months, with the value of the funds stated. Offshore, segregation may be required in theory: Anjouan's published standards require funds to be segregated from operational funds, and Curaçao imposes a similar duty. Note what segregation does and does not do — keeping funds in a separate client account does not mean customers get their money back if the operator becomes insolvent, and gambling businesses are legally allowed to hold customer money in overseas accounts. Money staked in an open bet is not customer funds at all and falls outside any protection arrangement.

There is a named dispute route with a real adjudicator

Check that the operator's terms name an ADR provider and give its contact details, and that the provider actually exists on a published list. Anjouan requires licensees to designate an Authority-approved provider, currently EGIS ADR, Axion ADR, iGaming ADR or an alternative provider, with complaints resolved within 30 days before escalation. Kahnawà:ke employs a full-time Dispute Resolution Officer. In Great Britain the Commission approves providers including IBAS, eCOGRA, CEDR and ProMediate, and licensees must offer ADR free of charge if a complaint is not resolved within eight weeks. There is a sting in the GB version that offshore sites do not replicate: IBAS's 2024-25 figures record 3,721 domestic disputes, an average completion time of 20 days, and 100% operator compliance with decisions in the consumer's favour across two years. That compliance rate is the closest thing this market has to a guarantee.

Withdrawal timing is stated in hours, not in weeks

Look for a stated processing time and a stated cut-off, and compare it with the deposit side. Advice from Visa is that real-time payouts under Visa Direct can land within 30 minutes of approval; Faster Payments completes over 90% of transactions in under two seconds, with a scheme ceiling of £1 million per transaction, raised from £250,000 on 10 February 2022, though individual banks set lower limits. So the technology is not the constraint. Where a site attributes slowness to "banking systems", the honest translation is usually an internal review queue. Further out, the rails matter too: a block arrives roughly every 10 minutes on Bitcoin, and the classic client treats a transaction as unconfirmed until six blocks deep, which most exchanges also require — a number that assumes an attacker with under 10% of network hashrate. Litecoin targets 2.5-minute blocks, about 15 minutes to six confirmations. Those are numbers an operator can plan around.

They say who regulates them — and nobody claims the UK

The most useful signal is a negative one. A trustworthy offshore operator states its licence and jurisdiction plainly and does not pretend to hold a British one. Anything that displays a Gambling Commission logo without appearing on the Commission's register is committing a different kind of error. The Commission has an Unauthorised URLs list in Malta's case and a public register in its own, and the warning notice of 20 January 2025 was explicit that unlicensed sites often target people who have self-excluded. A site that markets itself primarily to the self-excluded has told you what it thinks of its customers.

Six Steps to Check an Operator Before Depositing

Ordinary, lawful checks, in the order that saves the most time. Each is here for a reason.

1. Find the licence number and match it on the regulator's register. Reason: a seal is an image; a register entry is a record, and the domain on it must match the domain in the address bar. A Curaçao seal must redirect to the Curaçao Gaming Authority certificate portal, and an Anjouan certificate must resolve to a public register entry. This single step eliminates most of the field.
2. Read the withdrawal section of the terms before the bonus section. Reason: payout terms describe behaviour, and bonus terms describe marketing. Look for a stated processing time, a stated cut-off, any withdrawal fee, any maximum cashout clause, and any "sole discretion" language. If the withdrawal terms are vague and the welcome offer is not, the priorities are settled.
3. Confirm the customer-funds disclosure and the insolvency rating. Reason: this is where money actually sits, and it is the difference between a company failing with your balance ringfenced and a company failing with your balance gone. Note that a "not protected" rating is legal, common and worth knowing.
4. Check the dispute route names a real, published adjudicator, and read its window for complaints. Reason: after the operator says no, this is the only mechanism left. Anjouan's approved providers resolve complaints within 30 days; Kahnawà:ke has a Dispute Resolution Officer; GB providers generally expect a dispute filed within 12 months of the operator's notice that it could not resolve the complaint. A named provider with published rules is worth more than a support email address.
5. Verify the bank or e-wallet side of the payment chain. Reason: the payout does not end at the casino. Bank gambling blocks decline payments to merchants categorised under gambling Merchant Category Codes and are applied at card level, so they must be activated on each card — and most banks use a 48-hour or 72-hour cooling-off before gambling transactions are allowed again, with no effect on your credit score. A block left on is a withdrawal that never arrives, and no casino can fix it.
6. Write down what the terms said, and the date. Reason: terms change, and a screenshot dated the day of the deposit is the only version of the contract that will still exist in six months. Every dispute I have watched fail failed because the customer was arguing from memory against a page that had been edited.

Even doing all six, the honest position is that this is a market where the check reduces risk rather than removing it. The offshore operator keeps the right to close an account, the jurisdiction is distant, and the regulator has no duty to you.

Where the Not-on-GamStop Market Is Growing

The direction of travel is upward, and the figures disagree about how far. Gambling Commission analysis published on 5 November 2026 estimates that, among respondents who had gambled online in the past four weeks, 2.5% had engaged with illegal gambling websites, with a further 1.5% doing so in the past year — against 0.6% and 0.4% respectively across the whole population including non-gamblers, with 94.4% showing no indication of using one. Market-intelligence firm H2 Gambling Capital estimated £16.6 billion staked with illegal operators in the UK in 2025, up from about £5 billion in 2019, with the legal share of gambling falling from 97% to 92%.

Industry-commissioned work lands lower. A Frontier Economics study for the Betting and Gaming Council put black-market online stakes at £2.7 billion a year, 2.1% of the £128 billion staked with regulated remote casino, betting and bingo operators, involving 1.5 million Brits, with up to £4.3 billion including illegal in-person venues. Yield Sec/Gaming Compliance International, working for the Campaign for Fairer Gambling, put the GB online market at £8.8 billion GGR in 2025, split 91% regulated (£8.0 billion) and 9% unregulated (£0.8 billion) — from £8.2 billion and 7% unregulated in 2024. The Commission's own October 2024 methodology combines web-traffic data with a licensed-play assumption of £0.32 GGY per minute for online slots, and explicitly notes it does not capture activity hidden by VPNs.

Notice what the spread tells you: every estimate depends on who commissioned it and what they cannot see. The regulated market, meanwhile, is not shrinking. Total Great Britain Gross Gambling Yield was £17.5 billion in the year to March 2026, up 4.4%, with remote casino, betting and bingo at £8.3 billion, up 6.9%. Online gross yield for January to March 2026 was £1.55 billion, up 7% year on year, with average monthly active accounts of 13.4 million. The grey market grows inside a growing market. Enforcement churns too: the Commission's Illegal Markets team has issued 3,140 cease and desist and disruption notices since April 2024, referred 447,778 Bing and Google URLs and secured 287,961 removals, with an average 32% fall in engagement across 160 disrupted sites. Registrar blocks and suspensions did far better, at 91% each, than search removals, and the Commission says so itself — a site made hard to find is not a site made unreachable.

Across the UK and Its Registers

Gambling law is not devolved, so a welsh gambling site not on GamStop is the same thing as a Cornish one: an operator with no Commission licence and no obligation to the national scheme. What differs is the support around the player. For callers in Wales the National Gambling Helpline number is 0808 2819 265, alongside 0808 8020 133 for England and Scotland — the same line, operated by GamCare, free, 24 hours a day, every day of the year, reachable by phone, live chat and WhatsApp. Citizens Advice Scotland runs a Gambling Support Service advice line on 0800 328 1131, Monday to Friday, 10am to 3pm, for debt, housing, work and relationship problems linked to gambling. The levy that funds treatment is split across England, Scotland and Wales under the 50% treatment, 20% research, 30% prevention division, and NHS England took commissioning responsibility for gambling-harms treatment in England from 1 April 2026 against roughly £100 million a year.

The registers differ more than the law does. SENSE is the official national self-exclusion scheme covering all licensed land-based casinos in Great Britain, with a minimum six-month period extendable to twelve months, and the Commission's May 2026 FOI response put active self-excluded customers at 12,445 between 1 April 2025 and 1 April 2026, with 8,695 more enrolled under previous terms subject to auto-removal. Gamstop Betting Shops, formerly MOSES, runs on 0800 294 2060 and excludes a customer from named bookmakers' shops for a fixed 12-month term that cannot be ended early; its active count was 9,075 over the same period, working with over 60 operators and covering roughly 6,000 shops. Land-based self-exclusion follows LCCP ordinary code 3.5.2, which sets a minimum term of not less than six and not more than twelve months, extends it by a further six months unless the customer takes positive action to gamble again, and applies a one-day cooling-off. None of it reaches offshore.

Self-exclusion is worth stating as flatly as it deserves. Once registered, the exclusion holds for its full term — six months, one year, five years, or five years with auto-renewal — and it cannot be cancelled or deactivated during that period. It then stays in place after the chosen period ends unless the person contacts GamStop to remove it. The auto-renewal option can only be turned off during the last six months of a five-year period, and auto-renewal continues for up to four further five-year terms. If nobody deactivates, GamStop holds the data through a further automatic seven-year period during which operators are told the person was previously excluded. Registrations cannot be removed early; the Group's 2025 annual report devotes a section to refusing exactly that. A site outside the scheme is not a way round any of this. It is a place where the scheme cannot see the account, which is a different and worse thing.

Why the Pitch Is Hollow

Look at what the not-on-GamStop category actually advertises. It advertises an absence — no scheme, no cap, no credit-card ban, no daily check — and presents that absence as a benefit. The wagering comparison makes the trick visible. Since 19 January 2026, UK-licensed operators cannot apply wagering requirements above ten times, cannot mix betting, casino, bingo and lottery products in one incentive, and must not alter the value of an incentive if qualifying activity is reached faster than the qualifying period. The Commission rejected an outright ban in favour of the cap, judged that licensees would otherwise be highly likely to introduce terms stopping customers cashing out, and noted the cap "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements." Offshore, no cap applies. Terms at one operator run to 25× playthrough, with wagering on slots counting 100%, table games 20%, video poker and blackjack 10%, roulette and baccarat 5%, and craps and live dealer games 0% — the last being where many players spend their sessions. Another caps the maximum bet while wagering at €5, voiding anything above. A third reserves the right to void winnings above 300% of the bonus.

That is the arithmetic the marketing does not print: a less generous, less visible, less appealable version of the same bonus.

And the floors underneath are thinner in precisely the places that matter. There is no statutory levy on an offshore operator's Gross Gambling Yield, so there is no 1.1% finding its way to research, prevention and treatment. There is no £170,000 fine waiting for a term that lets a company forfeit winnings at its own discretion. There is no eight-week clock toward an ADR provider whose decisions operators comply with 100% of the time. The help exists regardless — GamCare's helpline on 0808 8020 133 answers 24 hours a day, every day; GamFam supports families through GRA5P; Gamblers Anonymous England, Wales and Ulster runs around 250 meeting locations with no appointment needed, on 0330 094 0322; the NHS National Gambling Clinic takes referrals. The bill for that support is paid by a levy these sites do not pay and a market they do not belong to.

Questions Worth Asking About a Site Not on the Scheme

Is it legal to use a gambling site that is not on GamStop?

Yes. The offence under section 33 of the Gambling Act 2005 attaches to the operator providing facilities without a licence, not to the adult customer. The Commission has said it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where they hold a licence elsewhere. That asymmetry is the whole problem: the operator takes the legal risk, and the player carries the practical one.

What does "not on GamStop" actually change for a player?

It removes the rules attached to a GB licence rather than adding anything. No daily customer screening, no credit-card ban, no ten-times wagering cap, no enforceable fair-terms condition, no eight-week route to a free ADR provider. Withdrawals are where that shows: GB data for June to September 2024 recorded 96.3% of 44.2 million withdrawals clearing automatically, and no comparable figure exists offshore because nobody is collecting it.

Do these sites check identity, and when?

Usually, but later and with less standardisation. GB operators must verify name, address and date of birth before a customer is permitted to gamble, and the anti-money-laundering threshold of €2,000 applies to deposits or withdrawals including linked transactions. Offshore, checks are less likely to be brought forward, and the Commission has said that identity verification was the subject of over a quarter of complaints reaching its Contact Centre. The tell is a document request that arrives the moment a withdrawal does.

How long should a withdrawal realistically take?

Judge it against the rails, not the marketing. Visa Direct payouts can be available within 30 minutes of approval, and Faster Payments completes over 90% of transactions in under two seconds. The constraint is internal: a processing queue, a manual review, a rule requiring one withdrawal at a time. So process times quoted in weeks are a stated choice, and the choice is the answer.

What are the safest alternatives if the scheme is the concern?

A UK-licensed site plus blocking software and a bank block. GamStop signposts Gamban and BetBlocker; BetBlocker states it blocks over 1,368,000 gambling websites and 3,100 apps and requires no registration. Note that Gamban's free UK licence scheme, TalkBanStop, ended on 31 March 2026, and Gamban now costs £4.99 a month or £29.99 a year in England and Scotland, free in Wales. Bank blocks cover card payments, not bank transfers to an offshore account.

Where does a complaint go if the site has no UK licence?

Nowhere convenient. The Commission is a regulator, not an ombudsman: it cannot resolve individual complaints or recover money. Offshore, complaints go to whatever ADR provider the operator names — Anjouan requires one, approved from a published list — or to the Curaçao authority, or to Kahnawà:ke's Dispute Resolution Officer. Enforcement statistics suggest the alternatives are thin: across April 2025 to March 2026, every quarter recorded 0 or 1 prosecutions commenced.

The Money Comes Back Faster Where Someone Is Watching

The not-on-GamStop market is best understood as an absence rather than an offer: no licence, no scheme, no rulebook, and — the part the advertising omits — no enforcement machinery standing between a player and a slow payout. The £16.6 billion that H2 Gambling Capital estimates was staked with illegal operators in 2025 is real money moving through a system with no statutory levy behind it, no fair-terms condition, no eight-week clock, and no free adjudicator whose decisions operators follow 100% of the time. Where the GB market clears 96.3% of withdrawals automatically, the offshore comparison is a term sheet and a distant register. For anyone who wants help rather than a licence check, the National Gambling Helpline is on 0808 8020 133, free and open every hour of the year.