UK Casinos Not on GamStop and What Identity Checks Really Mean
Available in GBUK casinos not on GamStop are offshore gambling sites that are not connected to Britain’s national online self-exclusion scheme. Their identity checks may happen at registration, when a payment reaches a threshold, or when a withdrawal is requested; the timing depends on the operator and its rules. They are not licensed in Great Britain, so UK protections do not apply.
The figures offer a useful reality check. The Gambling Commission says more than a quarter of complaints reaching its Contact Centre concern identity verification, often after documents are requested at withdrawal. Its own rules require British-licensed operators to verify identity before gambling and not to ask at withdrawal for information they could reasonably have obtained earlier. That is a standard, not a promise of instant payment.
I write about this market from the point where paperwork meets the cash-out button. An offshore licence, even a genuine one, does not make a site UK-licensed or bring it within the Commission’s consumer protections. If gambling is causing harm, the free National Gambling Helpline, run by GamCare, is available on 0808 8020 133, 24 hours a day, every day. This page is current as of 7 November 2026.
What “Not on GamStop” Means in Practice
GamStop Online blocks access to online gambling companies licensed in Great Britain for the chosen exclusion term. It does not cover every gambling service in the world. Offshore sites that lack a UK Gambling Commission licence are not connected to GamStop; the fact sheet notes this point is reported by trade and press sources, consistent with the scheme’s terms. The name is often typed “gamestop”, but it is written GamStop.
That limit is not a loophole to recommend. A GamStop exclusion cannot be cancelled during its term. It remains in place when the term ends unless the person contacts GamStop to remove it. An offshore site is not a way around that exclusion; it simply sits outside the scheme’s coverage.
The legal position is also often blurred in search results. The Commission says commercial gambling services offered to consumers in Great Britain require a Commission licence, even where an operator holds a licence elsewhere. Section 33 of the Gambling Act 2005 makes providing gambling facilities without the required licence an offence. The practical distinction matters: an overseas licence is not a British licence, and UK regulatory protections do not follow it across the sea.
For scale, the Commission estimated that 2.5% of people who had gambled online in the previous four weeks had engaged with illegal gambling websites, with a further 1.5% having done so in the previous 12 months. That is a population survey estimate published on 5 November 2026, not a count of every site or every transaction. It is enough to puncture the idea that “not on GamStop” is a harmless label for a different checkout page.
The British Standard for Identity Checks
For British-licensed remote operators, identity verification is supposed to happen before a customer is permitted to gamble. Licence Condition 17 requires information including name, address and date of birth. Operators should tell customers before deposit what identity information may be needed, in what circumstances and in what form.
The Commission’s 12 August 2026 blog made the point more sharply: onboarding with initials, nicknames or commercial addresses is not good enough. “Fuzzy matching” that leaves identity uncertain can create problems later, including mismatches with records such as GamStop. The sensible rule is to establish who the customer is up front, not to discover the question when money is due out.
There is a separate anti-money-laundering framework. Under the Money Laundering Regulations 2017, a remote casino must identify and verify a customer when deposits or withdrawals of funds or winnings reach €2,000, including linked transactions. That threshold is not permission to let someone gamble anonymously up to that point: UK licence conditions require identity verification before gambling. The two rules do different jobs.
For casinos using a threshold approach, linked transactions can include activity during a single logged-on period. A remote casino may use a hybrid approach: identify a customer and verify age at registration, then defer fuller identity checks until the €2,000 threshold is reached. The Commission says checks can be instant when electronic verification works, or take longer where documents are needed. It gives no universal processing time.
Offshore operators are not under the UKGC’s Licence Condition 17. A foreign regulator may impose its own requirements, but those are not a substitute for British rules or a British route to redress. The first concern is therefore not whether an offshore site asks for a passport. It is whether the operator, the licence and the domain can be verified at all.
What the Numbers Say About Verification and Delay
The Commission reports that over a quarter of complaints reaching its Contact Centre concern identity verification. It says consumers often raise the issue when documents are requested only on attempting to withdraw. That is a telling measure of poor timing: a check that could have been made at the door becomes a dispute at the exit.
There is no fixed maximum number of days in the UKGC’s rules for completing a withdrawal. But that is not carte blanche to add friction. Licence Condition 17.1.1 says a withdrawal request must not trigger a demand for information that the operator could reasonably have requested earlier, while allowing information required at that time under another legal obligation, such as anti-money-laundering rules.
The Commission’s guidance says operators should explain why a withdrawal is delayed or refused, subject to the legal prohibition on tipping off in money-laundering cases. It also says there is no valid reason to delay payout where the operator has no regulatory concern about the customer. “Security check” is not a magic phrase that turns every delay into good practice.
| Check or payment stage | British-licensed standard | What may happen offshore |
|---|---|---|
| Before gambling | Identity information, including name, address and date of birth, must be verified | Timing and requirements depend on the operator and its regulator |
| AML threshold | €2,000 in a single or linked remote-casino transaction triggers identification and verification duties | Do not assume the UK threshold or process applies |
| Documents | Passport, driving licence or household bill may be requested; electronic checks may avoid documents | Document list and handling depend on the operator’s terms |
| Withdrawal | No demand for information that could reasonably have been requested earlier | UKGC rules and complaint route do not apply |
| Commissioned benchmark | Over a quarter of Contact Centre complaints concern identity verification | No comparable UKGC oversight of an unlicensed operator |
The €2,000 figure in the table is the same statutory threshold described above; it is not a general “withdrawal limit”. Nor does a UKGC licence guarantee that every check is quick. It does mean there is a regulator, an applicable rulebook and a formal complaint route if a business behaves unfairly.
The Licence Is the First Check, Not the Last
A foreign licence can offer some oversight. It cannot authorise an operator to serve Great Britain where a UK licence is required, and it cannot give a customer access to UKGC protections.
Curaçao’s regulatory framework changed under the National Ordinance on Games of Chance, which took effect on 24 December 2024. The former master-licence and sub-licence model was replaced by direct licensing and supervision from the Curaçao Gaming Authority. Legacy orange sub-licence certificates ended on 15 October 2025. An old seal or historic /JAZ number is not proof of a current licence.
The CGA distinguishes between a Certificate of Operation Seal for an approved, registered player-facing domain and a License Certificate Seal, which is not domain-specific. The certificate of operation seal should redirect to the CGA’s verification site, and the domain shown on the certificate should match the site being accessed. The authority said in October 2026 that its previous online portal would not return and it was working on an alternative domain-verification mechanism. That makes a static badge less persuasive, not more.
Anjouan’s regulator says its licence certificates have a unique number and QR code linking to a public register. But a 2025 ABC News investigation reported serious disputes over the authority and licence administrator’s legal status. The regulator’s own assurance is not independent confirmation. This is exactly why “licensed” is not a conclusion; it is the beginning of a check.
Five Signs an Operator Deserves Scrutiny
1. The licence names the actual operator
A seal proves little if it does not identify the legal entity behind the site. Check the operator’s name in the regulator’s register, then compare it with the site’s terms. A certificate belonging to a different company is not a clerical quibble.
2. The domain matches the licence record
A valid licence for one domain does not automatically cover every lookalike address. For Curaçao, check the Certificate of Operation and confirm the domain shown is the same one being used. A copied logo is an illustration, not evidence.
3. Identity rules are explained before deposit
Look for a clear list of possible checks, documents and the circumstances in which they may be required. The Commission expects British operators to explain this before deposit. Vague wording that reserves a surprise document request for withdrawal deserves a raised eyebrow.
4. Withdrawal terms do not build in arbitrary delay
Read how withdrawals are reviewed, whether the operator can demand documents, and whether it gives a reason for delay. The UKGC prohibits unreasonable friction for its licensees, but that rule does not bind an offshore site. Terms that allow repeated manual reviews without clear criteria are a warning, not reassurance.
5. There is a real complaints route
Find the named dispute-resolution provider and check whether it is approved by the relevant regulator. Anjouan requires its licensees to name an approved ADR provider in player-facing terms. A generic contact form, with no escalation path or response timetable, is not an independent complaints system.
A Practical Check Before Trusting the Claims
- Identify the legal operator. Find the company name in the terms, not just the site footer. This lets the regulator’s register be checked against the entity actually offering the service.
- Verify the licence and domain independently. Use the regulator’s public register or verification process. A badge that cannot be followed to an official record has little evidential value.
- Read identity and AML terms together. Note when documents can be requested and what transactions may trigger further checks. Distinguish an ordinary identity check from a later source-of-funds inquiry.
- Read withdrawal conditions before payment. Look for manual-review clauses, maximum processing periods, fees and the stated reasons a payout can be held. “We may delay” is a wide door.
- Check the dispute route. Confirm the ADR provider is actually approved by the regulator named, and read the complaint steps and deadlines. Do not assume the UK Gambling Commission can resolve an offshore dispute.
- Treat a self-exclusion as binding. GamStop exclusions hold for their full term and remain in place afterwards until the person contacts GamStop to remove them. Do not treat an offshore operator as an alternative route.
Common Questions About Offshore Identity Checks
Can an offshore casino ask for identity documents?
Yes. Operators may ask for identity documents under their own rules or applicable anti-money-laundering obligations. A passport request is not, by itself, proof of wrongdoing. The more useful questions are whether the operator explained the process clearly, whether the licence and domain are verifiable, and whether the request is consistent with the terms.
Why might a casino ask for documents when a withdrawal is made?
A withdrawal can prompt an identity or anti-money-laundering review, particularly if the operator says it has a legal reason to check transactions or source of funds. British-licensed operators should not wait until withdrawal to ask for information they could reasonably have requested earlier. Offshore sites are outside that UKGC rule and complaint system.
Does an overseas licence protect customers in Great Britain?
It may provide oversight under the issuing jurisdiction, but it does not make the operator licensed in Great Britain. The Gambling Commission says a foreign licence does not replace the British licence required to offer commercial gambling services to consumers in Great Britain. UKGC protections and its complaint route do not apply to an unlicensed offshore operator.
Is the €2,000 AML threshold a limit on deposits or withdrawals?
No. It is the threshold at which remote casinos’ customer-due-diligence duties under the Money Laundering Regulations 2017 are triggered for a transaction, or linked transactions, involving funds or winnings. British remote operators must still verify identity before allowing gambling under their licence conditions. The threshold and the earlier identity rule serve different purposes.
Can the Gambling Commission get money back from an offshore casino?
The Commission says its role is regulatory, not that of an ombudsman; it cannot resolve individual gambling complaints or recover money for consumers. Its remit covers sites trading or advertising to customers in Great Britain that must hold a Commission licence. Offshore disputes may have a different route, but its effectiveness depends on the regulator and operator involved.
Where can people get help with gambling-related harm?
The National Gambling Helpline, operated by GamCare, is free on 0808 8020 133, 24 hours a day, every day. It is also available by live chat and WhatsApp. In Wales, the helpline number is 0808 2819 265. BeGambleAware directs people to the same helpline and online chat.
The Paperwork Is the Point
An offshore identity check may be legitimate, but it does not bring an operator under British rules: the Commission’s 2026 survey estimated 2.5% of recent online gamblers had engaged with illegal gambling websites.
Casinos Not on GamStop
Content created by the «Fast Payout Online Casino» team