Online gambling in the UK is legal when the operator holds a Gambling Commission licence, and the licence is what gives a player identity checks before withdrawal, withdrawals that cannot be reversed, self-exclusion through GamStop, free access to an independent adjudicator and the National Gambling Helpline on 0808 8020 133. Offshore sites offer none of it.
When anyone in Britain asks whether online gambling is legal in the UK, the question is really about two different industries wearing the same clothes. One is licensed here, by the Gambling Commission, and takes roughly £8.3 billion of remote casino, betting and bingo yield a year on the Commission's own figures for April 2025 to March 2026. The other is licensed somewhere sunny, or nowhere in particular, and is openly chasing British customers anyway.
The difference between them is not the colour of the website or the size of the welcome offer. It is a stack of paperwork and obligations: identity checks performed at the right moment, withdrawal rules that stop an operator stalling, self-exclusion that actually holds, adjudicators that rule on complaints for free, and money ringfenced for treatment. Every one of those is a British licence condition. None of them travels.
So this page is not a list. It is a comparison — of British rules against offshore terms, criterion by criterion, and of what a careful player can check in a few minutes before handing over a bank card. The market it describes is real: a study for the Betting and Gaming Council put illegal online staking at £2.7 billion a year, and H2 Gambling Capital estimated £16.6 billion staked with illegal operators in 2025, up from about £5 billion in 2019. The money is not small. Neither is what a player gives up by chasing it.
It is worth naming the scheme properly at the outset, because the spelling trips people up. The UK's national online self-exclusion scheme is GamStop — often typed "gamestop", which is not its name — and it works.
Table of Contents9
- The Numbers Behind Britain's Gambling Market
- Where British Sites Set the Standard
- How British Terms Compare With Offshore Ones
- The Offshore Licence, Explained
- Five Signs a Site Can Be Trusted
- How To Judge a Site Before You Join It
- Why the Black Market Keeps Growing Anyway
- Questions About Online Gambling UK
- The Licence, Not the Lobby
The Numbers Behind Britain's Gambling Market
British gambling yield across the whole industry was £17.5 billion in the year to March 2026, up 4.4% on the year before, with remote casino, betting and bingo at £8.3 billion of it. Online yield ran at £1.55 billion in the single quarter of January to March 2026, across 26.8 billion bets and spins and 13.4 million average monthly active accounts. Online slots alone took £773 million that quarter, from 25.1 billion spins. That is a market that can afford to be regulated properly, and largely is.
Against that, the illegal side is smaller but not trivial. The Commission's analysis published on 5 November 2026, covering data to April 2026, found 0.6% of respondents had engaged with illegal gambling websites in the previous four weeks, and a further 0.4% within the previous year. Among people who had gambled online in the past month, the figure was 2.5%, with another 1.5% in the trailing year. Its dashboard recorded 586 illegal websites accessible to British consumers in September 2026 — four per cent more than a year earlier.
Those two datasets say something unfashionable. Enforcement is working in the aggregate and failing at the margin: thousands of sites are disrupted, and hundreds remain findable. The Commission's own disruption figures bear this out. Since April 2024 its Illegal Markets team has issued 3,140 cease and desist and disruption notices, referred 447,778 Google and Bing URLs and secured 287,961 removals. Measured across 160 illegal websites, engagement fell 32% on average afterwards — but by method the spread is vast: registrar blocks and website suspensions produced average falls of 91%, GEO IP blocking 60%, and Google removal only 30%. Removing a site from search does not remove it. That is the argument for judging the licence, not the lobby page.
Where British Sites Set the Standard
The obligations attached to a British licence are not aspirations. They are conditions, and the Commission names the failure when it happens.
Identity Checks Before You Play, Not Before You’re Paid
Under Licence Condition 17, an operator must verify a customer's name, address and date of birth before that customer gambles — not, as used often to happen, at the moment of the first withdrawal request. The Commission has been blunt since its August 2026 guidance that onboarding on partial or "fuzzy-matched" data is not good enough, and that a mismatch as small as a middle name used instead of a forename can defeat a GamStop check. Over a quarter of complaints reaching the Commission's contact centre concern identity verification, and it is one of the most common dispute types reaching adjudicators. Anti-money-laundering law also permits checks at €2,000 of deposits or withdrawals, but it cannot be used as an excuse for a stage-managed delay.
Withdrawals Without Friction
Reverse withdrawals — the button that lets a winning player cancel the withdrawal and put the money back into play — were banned permanently on 31 October 2021 under requirement 14B. A customer requesting a withdrawal must not be given the option to deposit those funds. Terms putting a maximum on what a player may withdraw from their deposit balance are prohibited; the Commission's own example of a banned clause is "You may withdraw up to £50 per day and up to £500 per week". And Licence Condition 17.1.1 forbids demanding extra information at withdrawal if it could reasonably have been requested earlier.
Terms That Won’t Be Rewritten
On 19 January 2026 the wagering cap took effect: bonus wagering requirements are capped at ten times, and mixing two product types in one offer is banned. That is a real constraint. Offshore terms routinely run 25× to 50×, with no-deposit bonuses at 40× to 60× against a capped cash-out.
How British Terms Compare With Offshore Ones
The sensible way to read an offshore offer is to line up the criteria that matter and see which ones are simply absent. This is a method comparison, not a brand one.
| Criterion | British-licensed site | Typical offshore site |
|---|---|---|
| Regulator | Gambling Commission | Curaçao (CGA), Anjouan, Kahnawake, or no licence |
| Identity check timing | Before the customer may gamble | Usually only at first withdrawal |
| Reverse withdrawal option | Banned since 31 October 2021 | Frequently offered |
| Maximum withdrawal from deposit balance | Prohibited | Sometimes capped, e.g. 300% of bonus |
| Bonus wagering cap | 10× maximum, since 19 January 2026 | Commonly 25× to 50×, up to 60× |
| Self-exclusion scheme | GamStop, mandatory under code 3.5.5 | No connection to GamStop |
| Free independent adjudicator | Listed ADR providers, free to the consumer | Operator-nominated ADR, or none |
| Customer-funds disclosure | Written disclosure of insolvency rating required | Rarely stated |
| Deposit limit prompt before first deposit | Required since 31 October 2025 | Not required |
| Cooling-off on lifting a bank block | 48 or 72 hours at most banks | Not applicable |
One row deserves comment. The 300% maximum cashout figure is not invented — it appears in the terms of at least one offshore operator, which reserves the right to void everything above three times the credited bonus. A British operator could not lawfully write that clause at all.
The Offshore Licence, Explained
This is the thing the whole topic turns on, so it is worth taking slowly. Understand the offshore licence and you understand the offer.
The first time anyone looks at a Curaçao seal, the natural assumption is that a foreign regulator has vetted the operator in some way comparable to the Commission. That was never quite true, and since 2024 it has been less true. The National Ordinance on Games of Chance took effect on 24 December 2024 and made the Curaçao Gaming Authority the direct licensing and supervisory authority, ending the old master-licence and sub-licence model. The legacy "orange" certificates of operation expired on 15 October 2025; a historic /JAZ number must no longer be treated as proof of a current licence. The licence itself is not expensive by British standards: EUR 4,592 to apply, EUR 47,450 a year in total fees. Anjouan is cheaper still at EUR 17,828 to issue and the same to renew, and an ABC News investigation in December 2025 reported that Anjouan Licensing Services claims to have issued more than 1,300 gambling licences at around EUR 17,000 each a year, with Comoros financial intelligence officials describing one of the entities involved as operating illegally.
None of that makes an offshore operator a fraud by definition. Kahnawà:ke has regulated interactive gaming since 1999, requires player funds to be segregated and imposes real permit conditions. Anjouan's published standards require segregated player funds, certified random number generators and age verification. What it means is this: the regulator is not sitting in Birmingham with the power to strip a licence from a business that has 13.4 million monthly accounts to lose. The commercial pressure that keeps a British operator behaving — a licence that is expensive, conditional and revocable — is largely absent.
Then there is the exclusion term. A GamStop registration blocks a person from gambling with every operator licensed in Great Britain: set for six months, one year, five years or five years with auto-renewal, effective within 24 hours, and it cannot be cancelled during the term. It also stays in place after the chosen period ends unless the person contacts GamStop to remove it, and a failure to deactivate means a further automatic seven-year self-exclusion period during which operators are told that person was previously excluded. An offshore site is not connected to GamStop. Using one does not bypass the self-exclusion; it merely means the operator's terms, offshore adjudicators, and no cooling-off apply.
Warning signs in an offshore licence, in order of how often they matter:
- A seal that does not verify. A genuine Curaçao Certificate of Operation seal must redirect to cert.cga.cw. If the certificate behind it names a different domain from the one you are on, you are looking at another operator's paperwork.
- A licence number with no working register lookup. Anjouan certificates carry a unique number and a QR code linking to a public register; a certificate that cannot be verified through it should not be relied on.
- No named adjudicator. Anjouan requires licensees to name an approved ADR provider in their terms. Silence on that point is a choice.
- A registered address in a jurisdiction with no licensing framework. Costa Rica has no comprehensive gambling licensing regime at all, and its Legislative Assembly rejected the bill that would have created one in early 2026.
Five Signs a Site Can Be Trusted
Each of these takes a few minutes. None requires an account.
The Licence Names Itself, and the Register Agrees
Check the footer for a Gambling Commission licence number and then click through to the Commission's public register and confirm that the activities and domain names match. An operator licensed elsewhere but trading here without a Commission licence is not lawfully offering you a commercial service — the Commission has said so plainly since 21 October 2024.
Identity Verification Arrives Before the First Bet
A site that lets anyone deposit and play for weeks and then produces a documents request when winnings are requested has told you what it thinks a verification rule is. The Commission expects age and identity checks before the first deposit or stake. Ask before joining.
Withdrawals Go Through Without an Offer to Reverse Them
There is no lawful reverse withdrawal button on a British site. If a withdrawal page offers to cancel the request "to keep playing", or requires one withdrawal at a time, or pulls every fifth withdrawal for manual review, that is not a house rule — it is the pattern the Commission settled against in October 2026 for £900,000.
Funds and Limits Are Described in Writing
British operators must state in writing whether customer funds are protected on insolvency, at which of the three ratings, and by what method, and the customer must acknowledge that disclosure before gambling — on the first deposit and after any change. Since 31 October 2025 they must also prompt a financial limit before the first deposit and offer one via a free-text box. Offshore terms frequently say nothing about insolvency at all.
Complaints Have an Address
Check that the terms name an approved adjudicator and that you can reach it without the operator's permission. On the Commission's list are the Centre for Effective Dispute Resolution, IBAS, eCOGRA, ADR Group, Pegasus ADR, ProMediate, Blexr and the Tattersalls Committee. eCOGRA's Great Britain report for the year to 30 September 2025 records 911 disputes received, 150 of them valid "Deposits & Withdrawals" cases, and 17.8% of completed disputes ruled for the consumer. IBAS settled domestic disputes in an average of 20 days that year. Those are not generous odds for a player, but they are a hearing.
How To Judge a Site Before You Join It
- Find the licence, then find it again on the regulator's register. Footer text is a claim; the register is the record. Reason: a licence number that resolves to a different trading name or domain means one of the two is being misrepresented.
- Read the withdrawal terms before the bonus terms. Look for caps on withdrawals from the deposit balance, a stated processing fee, a limit on how many withdrawals may run at once, and any manual-review clause. Reason: these are the clauses that decide how money leaves, and British rules prohibit most of the ones that cause trouble.
- Read the bonus terms as a single question: what would I have to wager, and what would I be allowed to take out? A wagering multiple of ten times or less and no maximum cash-out is a British-compliant offer. Reason: a 40× requirement with a capped cash-out is not a bonus, it is an inducement with an exit toll.
- Check the self-exclusion position. On a British site, confirm the GamStop arrangement and remember that a registration holds for its full term and stays until the person contacts GamStop to lift it. Reason: understanding what the scheme actually does is the whole basis for judging anyone who implies it can be stepped around.
- Confirm the adjudicator and the insurer of last resort — the ADR provider and the insolvency rating. Reason: if the operator becomes insolvent, the rating tells you whether your balance is protected; if there is a dispute, the adjudicator tells you whether anyone will hear it.
- Set a deposit limit at the point of joining, not at the point of trouble. British sites must prompt this before the first deposit. Reason: a limit set in calm conditions is the only kind that survives an expensive evening.
Why the Black Market Keeps Growing Anyway
Nobody knows the size of it precisely, and it is worth saying so rather than pretending. H2 Gambling Capital's estimate of £16.6 billion staked illegally in 2025 sits alongside a Frontier Economics study for the Betting and Gaming Council that put black-market online staking at £2.7 billion a year, and a Yield Sec analysis for the Campaign for Fairer Gambling that put unregulated play at 9% of a £8.8 billion market. The three do not agree, because none of them can see inside a VPN. The Commission's own October 2024 methodology says explicitly that it does not capture activity hidden that way.
What is not in dispute is where the traffic goes when a site is pushed off Google. The Illegal Markets team's own numbers show Google removal producing a 30% average fall in engagement, against 91% for a registrar block. A site that is hard to find is not a site that is closed. And the Commission's January 2025 warning notice made a narrower point that is worth repeating: unlicensed sites often target people who have self-excluded through GamStop. That is not a service to them. It is a business model built on the one group the British system is designed to catch.
Questions About Online Gambling UK
Is Online Gambling Legal in the UK?
Yes, when the operator holds a Gambling Commission licence. Offering commercial gambling services to British consumers without one is an offence under section 33 of the Gambling Act 2005, and holding a licence in another country does not excuse it — the Commission said so directly on 21 October 2024. Playing on an unlicensed site is a different question from operating one.
How Many Online Gambling Sites Are There in the UK?
There is no single published headcount of licensed domains, because operators hold multiple domain names under one licence. A more useful figure is the Commission's public register, which lists licence holders and their approved domains. On the illegal side, the Commission's dashboard recorded 586 sites accessible to British consumers in September 2026, and 311 had disruption action taken against them in the second quarter of 2026–27.
How Many People Gamble Online in the UK?
The Gambling Survey for Great Britain, published 16 July 2026 from 20,775 adults, found 47% had gambled in any form in the previous four weeks, falling to 27% when lottery-only players are excluded. Of those who had gambled online in the past month, the Commission estimates 2.5% had engaged with an illegal gambling website. Participation is broad; illegal use is narrow but persistent.
Do You Pay Tax on Online Gambling Winnings in the UK?
No. There is no tax on a player's gambling winnings in Great Britain, and no duty attached to the act of winning. The tax that does exist sits on the operator, through the statutory levy introduced by the Gambling Levy Regulations 2025 and commenced on 6 April 2025, at 1.1% of previous-year gross gambling yield for online operators and software licences. That levy raised just under £120 million in its first year.
Can You Get a Refund From an Online Gambling Site?
Sometimes, but rarely on request and never automatically. Deposited but unstaked money remains the customer's, and operators may not confiscate a deposit balance for failing identity or age verification. Beyond that, disputes go through the operator's complaint process, then to an adjudicator free of charge. eCOGRA ruled 17.8% of completed disputes in the consumer's favour in the year to 30 September 2025 — so the route works, at roughly one attempt in six.
What Happens When Gambling on an Offshore Site?
Nothing lawful is available to you afterwards. A Curaçao or Anjouan operator is not bound by the British rules on withdrawal terms, and no GamStop registration reaches it. The Commission is a regulator, not an ombudsman, and cannot recover money for an individual consumer. What does exist is help: the National Gambling Helpline on 0808 8020 133, free and 24 hours a day, and GamCare's live chat and WhatsApp.
The Licence, Not the Lobby
Strip away the branding and online gambling in Britain is one rule applied to a market of £8.3 billion in remote yield: the licence, and the obligations bolted to it, are the only durable thing a player has. GamStop holds for its full term and stays until the person contacts GamStop to remove it; withdrawals cannot be reversed; a bonus cannot demand more than ten times the wagering; a complaint gets a free hearing. An offshore site offers a bigger headline and none of that backstop. The operator that paid £900,000 in October 2026 for delaying withdrawals did so under a licence it could have lost — and that is precisely why the deadline mattered.