Gambling Sites UK What the British Licence Buys You and What Offshore Sells Instead

Gambling sites in the UK split into two groups. A site licensed by the Gambling Commission must check your identity before you bet, cap bonus wagering at ten times, and join GamStop. An offshore site licensed in Curaçao, Anjouan or Kahnawà:ke is not licensed in Great Britain, offers none of that, and cannot be chased by a British regulator.

The phrase "uk gambling sites" sounds like a description. It is really a sorting rule, and a fairly brutal one. On one side sit the operators the Gambling Commission licenses, which must obey a rulebook that has grown teeth over the past six years. On the other sit the offshore sites — Curaçao, Anjouan, Kahnawà:ke, Costa Rica — that will take a British deposit without ever holding a British licence. The Commission's own position, published on 21 October 2024, is blunt: it is illegal to offer commercial gambling services to consumers in Great Britain without a Commission licence, and that applies just as much to an operator holding a licence somewhere else.

What follows is a comparison, not a shopping list. I have no interest in telling anyone which site to open. I am interested in the difference between the two regimes, because it is large, it is measurable, and almost all of it shows up at the two moments that matter: when you try to take money out, and when you try to stop.

One fact before the detail. An offshore site is not a way round self-exclusion. GamStop holds for its full term and then stays in place until the person contacts GamStop to remove it. The scheme is often typed "gamestop", which is a slip about the spelling and nothing else.

What the British Licence Actually Requires

UK Gambling Sites The Baseline Every Comparison Needs

The Commission's Licence Conditions and Codes of Practice is not a marketing document. It is a list of things an operator must do or lose the right to trade, and a few of its requirements are so specific that they make the offshore comparison easy.

Take identity. Licence Condition 17 has required, since 7 May 2019, that a licensee obtain and verify information establishing a customer's identity before that customer is permitted to gamble. Name, address and date of birth. No bet until it is done. The Commission said again in a blog posted 12 August 2026 that it expects identity and age checks brought forward to before a deposit or a stake, and that onboarding people on initials, nicknames or commercial addresses is not good enough.

Take bonuses. Since 19 January 2026, Social Responsibility Code 5.1.1 caps wagering requirements at ten times, and bans incentives that mix more than one gambling product. The Commission chose a cap rather than an outright ban, and explained why: some licensees were applying wagering of up to 60 times.

Take payouts. The Commission permanently banned reverse withdrawals for remote operators through RTS 14B, in force from 31 October 2021: once a withdrawal is requested, the consumer must not be offered the chance to cancel it. Under Licence Condition 17.1.1, a withdrawal request must not trigger a demand for documents the licensee could reasonably have asked for earlier. And Licence Condition 7.1.1 requires terms to be fair within the meaning of the Consumer Rights Act 2015.

Then there is the enforcement record, which is where the rhetoric usually stops and the arithmetic starts. On 21 October 2026 the Commission announced that one licensee would pay £900,000 in a regulatory settlement, with failures that included unnecessarily delaying consumer withdrawals — including a term allowing only one withdrawal at a time, held unfair under the Consumer Rights Act 2015, and manual reviews of every fifth or tenth withdrawal that produced fresh document demands.

That is what a licence looks like when it is working. It is also, and this is the uncomfortable part, a list of things that had to be legislated against because they were being done.

Best UK Gambling Sites and Best Offshore Sites The Terms Compared

## Best UK Gambling Sites Are Judged by Method, Not by Brand

A comparison by brand is advertising. A comparison by method is journalism, and it is the only one that survives contact with a payout. So here is the same set of decisions, priced and timed, on both sides of the line. Every figure below comes from a named primary source or from an operator's own published terms; where the sheet has no number, I have said so rather than inventing one.

Two lines deserve more than a table cell.

The withdrawal line is where the difference is felt. Commission data covering June to September 2024, cited in a speech delivered 6 November 2025, records 44.2 million withdrawals by customers of large online operators: 96.3 per cent cleared automatically, 3.5 per cent within 24 hours and 0.1 per cent took up to 48 hours. Set against that the fact that problems with withdrawals were the number one topic raised by consumers with the Commission's Contact Centre, and that by July 2024 it was still receiving around 2,000 complaints a year about withdrawal delays. Both things are true. British sites pay fast on average and still generate more complaints about payment than about anything else, which tells you the average is doing a lot of hiding.

The bonus line is where the arithmetic is easiest to check. A ten-times cap on a £100 bonus means £1,000 of wagering. At 25×, the same bonus costs £2,500 of play; at 40×, £4,000. Offshore sites are not bound by the Commission's cap, and their published terms say so in the ordinary way, as though the number were weather.

The Paperwork Where Newcomers Slip

New brands are not automatically worse, but they are where the gap between a licence and a logo shows up. A licence is a permission to trade, not a guarantee of good behaviour, and the Commission's register is the only place that answers the question properly.

Three practical checks do most of the work. First, whether the site appears on the Commission's public register with the activities and domain names matching what is on screen. Second, whether the terms state the customer-funds insolvency rating — a licensee must select "not protected", "medium protection" or "high protection" and state which applies, and one rated "not protected" must remind customers every six months that their money is not protected if the business fails. Third, whether the complaints route names an ADR provider from the Commission's approved list, because a site with no named ADR has no route at all.

I would add a fourth, and it is the one I trust most: read the withdrawal section of the terms before depositing, not after winning. If the document is silent on how long a payout takes, that silence was drafted.

The Licence, the Seal and the Jurisdiction

## What Offshore Licences Actually Mean for a British Player

This is the section the topic turns on, so it is worth doing slowly.

A licence is a permission issued by a state to a business. What it is worth to a player depends entirely on what that state requires, what it can inspect, and what it will do when something goes wrong. Curaçao's framework is the clearest example of a jurisdiction in transition. The National Ordinance on Games of Chance, the LOK, took effect on 24 December 2024 and made the Curaçao Gaming Authority the direct licensing and supervisory authority, replacing the old master-licence and sub-licence model. The legacy "orange" sub-licence certificates of operation ended on 15 October 2025, and the CGA says operators should no longer rely on the former orange certificate as proof of a current licence. A historic /JAZ number, it adds, must not be treated as independent proof of a valid licence today.

The verification mechanics are the part most people never see. The CGA issues two different seals. A Certificate of Operation Seal goes only to B2C operators and only for an approved, registered player-facing domain; a License Certificate Seal is available to both B2B and B2C entities and is not domain-specific. Clicking a Certificate of Operation Seal must redirect to cert.cga.cw. If the design, colour or format differs, the site is not authorised by the CGA. If the certificate behind the seal shows a different domain from the one being visited, the site is displaying another operator's certificate and should be treated as unauthorised or fraudulent.

Anjouan is a different story again. Internet gaming there is regulated under the laws of the Autonomous Island of Anjouan, part of the Union of the Comoros, on a framework founded on legislation adopted in 2005. Published fees are EUR 17,828 for B2C licence issuance, the same for annual renewal, and EUR 500 per additional domain. The regulator's own certificate verification framework says licence certificates carry a unique licence number and a QR code linking to the public register, and that certificates which cannot be verified through that register should not be relied on as evidence of licensing status. Anjouan also stated, in a statement reported on 10 June 2026, that its licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world".

That sentence is the whole argument in miniature. A licence issued in Anjouan is a licence issued in Anjouan. It is not a British licence, it does not carry British protections, and the operator has said as much.

Kahnawà:ke has regulated interactive gaming since 1999 and structures it differently: one Interactive Gaming Licence, held by a single entity, with Client Provider Authorizations underneath it. Its rules require operators to let a player set limits including zero, and state that its own voluntary self-exclusion is permanent and irrevocable — with the striking corollary that a player who breaches a self-exclusion prohibition forfeits funds deposited or won to a third-party charity chosen by the Commission. Costa Rica is the fourth case, and the simplest: it operates no comprehensive gambling licensing regime at all, and the "data processing license" sometimes cited in the trade is not a licence in the strict legal sense. Its Legislative Assembly rejected Bill No. 25,057 in early 2026, which would have introduced one.

None of this makes every offshore site a fraud. It does mean that when something goes wrong, the machinery you can reach is the machinery of the place that licensed it — and, as the Commission states plainly, it is a regulator and not an ombudsman, so it cannot resolve individual complaints or get anyone's money back even when the site is British.

## Why Offshore Sites Attract People Who Have Self-Excluded

Here I will be direct, because the evidence is. The Commission issued an industry warning notice on 20 January 2025 about casino games supplied by licensed operators appearing on unlicensed websites available to GB consumers, and noted that such sites often target customers who have self-excluded via GamStop and may have inadequate social responsibility and AML controls.

The mechanics are obvious once stated. GamStop Online blocks a person from signing up for or using online accounts with gambling companies licensed in Great Britain, and the licence condition requiring participation, Social Responsibility Code Provision 3.5.5, has applied to all online operators since 31 March 2020. A site with no British licence has no such obligation. That is not a loophole in the scheme; it is the scheme's outer boundary, and the Commission's Illegal Markets team spends its budget on the far side of it — 3,140 cease and desist and disruption notices since April 2024, comprising 2,032 C&Ds, 774 registrar referrals, 402 host referrals and 3 payment provider referrals, plus 447,778 Bing and Google URLs referred and 287,961 removals secured.

The scheme itself does not bend. Registering with GamStop Online blocks a person from gambling with all online gambling companies licensed in Great Britain for six months, one year, five years, or five years with auto-renewal. Signing up takes a few minutes but the block can take up to 24 hours to become effective. Once registered, the registration cannot be cancelled or deactivated during the exclusion period, and it stays in place after the end of the chosen term unless the person contacts GamStop to remove it. Registrations cannot be removed early, and the Group's 2025 annual report devotes a section to its refusal to do so.

The scale is not marginal. GamStop recorded 117,756 new registrations during 2025 and had 561,983 active exclusions at the end of that year; as of July 2026 it reported 614,738 consumers on the register, of whom more than one in two had chosen the maximum five-year exclusion. Of the periods selected by registrants in 2025, 29 per cent chose six months, 24 per cent a year, 25 per cent five years and 22 per cent auto-renewal. Under-25s accounted for nearly one in three of all self-exclusions in the first half of 2026, a 26 per cent year-on-year increase. Whatever the offshore market is selling, this is the population it is selling to.

What Is Actually Left to a Player

So what is left, factually, when a site is not on GamStop? A British-licensed operator cannot be that site; the licence condition forbids it. An offshore operator can, and the protections listed earlier simply do not travel with it. There is no Commission licence condition 17.1.1 to stop a document demand at withdrawal, no ten-times wagering cap, no ban on reverse withdrawals, no requirement to name an approved ADR, and no insolvency rating to disclose.

The substitutes are worth knowing, because they exist and they are not nothing. Blocking software is the first: GamStop signposts Gamban and BetBlocker, and BetBlocker states it blocks over 1,368,000 gambling websites and 3,100 apps, requires no registration and is free worldwide. Gamban says it blocks licensed and unlicensed sites and is designed to be as difficult to remove as possible; since TalkBanStop's free UK licence scheme ended on 31 March 2026 it is free for residents of Wales but costs £4.99 a month or £29.99 a year in England and Scotland after a 7-day trial. Bank blocks are the second: the Commission's list of banks offering a gambling blocking service, last updated 16 October 2026, names Bank of Scotland, Barclays, Halifax, HSBC, Lloyds Bank, MBNA, Monzo, NatWest, Royal Bank of Scotland, Santander and Starling. Those blocks decline payments to merchants categorised under gambling Merchant Category Codes, are applied at card level so must be activated on each card, and most banks use a 48-hour or 72-hour cooling-off period before gambling transactions are allowed again.

That is the honest answer to the question of how to block non-UK gambling sites: at the device and at the card, not at the till.

Five Signs an Operator or Service Can Be Trusted

Trust is a conclusion, not a badge. These five checks take about twenty minutes in total and each one has a quick test.

### The Licence Matches the Domain

Check the Commission's public register and click through to see whether the site's activities and domain names match what is on screen. A licence held by a group is not the same as a licence covering the domain in front of you, and the Commission's own advice is to make exactly that comparison. Offshore, the equivalent test is the seal: a Curaçao Certificate of Operation Seal must redirect to cert.cga.cw, and a certificate showing a different domain means the site is displaying someone else's paperwork.

### The Terms State the Insolvency Rating

A licensee holding customer funds must state clearly in its terms whether those funds are protected if the business becomes insolvent, at which level and by what method, using the Commission's ratings of "not protected", "medium protection" or "high protection". The disclosure must be in writing and acknowledged before funds are used for gambling. Quick check: search the terms for the word "insolvency". If it is absent on a British site, ask why. If it is absent on an offshore one, that is the answer.

### The Withdrawal Section Is Specific

Look for the named processing times, the payment methods, and any fee. A licensee may charge a cost-reflective processing fee and may reasonably limit the size or number of separate withdrawals, provided the term is fair and transparent, is made clear before the deposit, and the charge does not exceed the direct cost of processing. What no British licensee may do is impose a maximum limit on what can be withdrawn from the deposit balance. The Commission's own example of a prohibited term is "You may withdraw up to £50 per day and up to £500 per week".

### An ADR Provider Is Named

Under SR Code 6.1.1 a licensee must have arrangements for a customer to refer a dispute to an ADR entity free of charge if it is not resolved within eight weeks of receipt, after the operator's own procedure has been exhausted. The approved list includes ADR Group, Pegasus ADR Service, CEDR, eCOGRA, IBAS, ProMediate and Tattersalls Committee. IBAS and eCOGRA have historically handled most gambling disputes. Quick check: if no provider is named anywhere in the terms, the route does not exist.

### The Small Print Does Not Reserve Discretion

Operators should not use terms giving themselves sole discretion — "may" or "reserve the right" — to void or withhold winnings, because the Commission treats such terms as unfair within the meaning of the Consumer Rights Act 2015. The enforcement record shows what happens when they do. An operator was fined £170,000 in July 2025 for failures including a bonus term stating the operator had the right at its own discretion to close accounts or forfeit winnings.

How to Judge a Site Before You Deposit Anything

## Six Checks, in Order, With the Reason for Each

1. Find the licence on the Commission's register, then check the domain. The register lists which activities and which domain names a licence covers. The reason is simple: a group can hold a licence while the specific site in front of you does not, and the register is the only document that settles it.
2. Read the withdrawal section of the terms before the bonus section. Withdrawal terms govern the money that is already yours; bonus terms govern money that is not. Reading them in that order stops an attractive offer from framing the document.
3. Confirm the customer-funds insolvency rating. A licensee must publish whether funds are protected, at what level and how. The reason is that a separate client account is not a guarantee: keeping customer funds in one does not mean customers get their money back if the operator becomes insolvent, and businesses are legally allowed to hold customers' money in overseas accounts.
4. Check that an ADR provider is named, and note the eight-week clock. The complaints route runs through the operator first, then to an approved ADR entity free of charge. The reason to note the clock is that ADR providers will not accept a dispute that has not been through the operator's own procedure — eCOGRA recorded that 361 of 499 invalid disputes in its 2024–25 reporting year had not been.
5. For an offshore site, verify the seal on the regulator's own verification page. A certificate that cannot be verified through the public register, in Anjouan's own words, should not be relied on as evidence of licensing status. The reason is that a copied or expired seal is indistinguishable from a valid one until it is clicked.
6. Set a limit at the account, and a block at the card and the device. From 31 October 2025 all gambling businesses must prompt customers to set a financial limit before the first deposit, present it as the default, and remind customers every six months to review their account and transaction information. The reason to add the card block is that it operates outside the operator's systems entirely, where no term of service can reach it.

Nothing in that list requires anyone to gamble, and none of it is exotic. It is ordinary consumer diligence, applied to a product sold on the promise that diligence will not be needed.

Frequently Asked Questions

How many online gambling sites are there in the UK?

There is no single published total, and the honest answer is that the number is unstable by design. The Commission's illegal gambling dashboard recorded 586 illegal gambling websites accessible to GB consumers in September 2026 — 4 per cent less than the previous three-month average but 4 per cent more than in September 2025. Across May 2024 to July 2025, just over 1,000 unique illegal gambling websites were accessed by consumers in Great Britain. Licensed numbers move too, since licences are surrendered and revoked.

Do UK gambling sites accept credit cards?

No. The Commission banned credit card use for gambling with effect from 14 April 2020, adding licence condition 6.1.2 to the LCCP. The ban covers all remote gambling licensed by the Commission and non-remote betting, and operators must also ensure that money paid in from an e-wallet was not loaded from a credit card. The one carve-out is non-remote lottery operating licences: credit cards can still buy lottery tickets and scratchcards in a shop or by post.

Are offshore or non-UK gambling sites legal for British players?

The offence sits with the operator, not the player. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and the Commission states it is illegal for anyone to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where they hold a licence in another jurisdiction. What a player loses by using such a site is the British rulebook: no GamStop coverage, no ten-times wagering cap, no ban on reverse withdrawals and no route to an approved ADR provider.

What happens if an offshore site refuses to pay out?

Very little, in the British sense. The Commission cannot resolve individual complaints or help consumers recover money; it is a regulator, not an ombudsman. An offshore regulator may have an ADR requirement — Anjouan, for instance, requires licensees to designate an Authority-approved provider and expects complaints resolved within 30 days before escalation — but whether the provider is reachable, free and willing to hear a British consumer's dispute depends entirely on the jurisdiction and the site's published terms.

Does self-exclusion cover offshore gambling sites?

No, and it is worth stating as fact rather than as a warning. GamStop Online blocks a person from accounts with gambling companies licensed in Great Britain only; it cannot prevent access to services run by organisations that do not participate in it. The licence condition requiring participation applies to British licensees, so a site with no British licence has no obligation to check the register. Offshore sites are not a way round self-exclusion; they are simply outside it.

What is the fastest way to block gambling sites that are not UK-licensed?

Blocking software and a card-level block, together. BetBlocker states it blocks over 1,368,000 gambling websites and 3,100 apps, free and without registration, while Gamban states it blocks licensed and unlicensed sites and is designed to be hard to remove. Bank gambling blocks work at card level, so they must be switched on for each card, and most banks apply a 48-hour or 72-hour cooling-off period before gambling payments are allowed through again.

Where the Two Regimes Leave a Careful Player

The British licence is worth having and it is worth knowing exactly what it buys: identity checks before a bet rather than at the payout window, a wagering cap of ten times, no reverse-withdrawal button, a named dispute route, a published insolvency rating, and a regulator with a disruption team that issued 3,140 notices and secured 287,961 URL removals since April 2024. An offshore licence buys a licence issued somewhere else, and the operators themselves now say so in public. If any of that goes wrong, the National Gambling Helpline, run by GamCare, is free on 0808 8020 133, 24 hours a day, every day of the year — and it is the same number whether the site that caused the trouble held a British licence or not.