Enforcement has tightened considerably since the 2023 white paper, yet the practical gap between what the law says and what actually happens offshore remains wide. The Gambling Commission now has the power to fine operators up to 10% of their gross gambling yield (GGY). That ceiling is not theoretical. In March 2023, William Hill was ordered to pay £19.2 million for social responsibility and anti-money laundering failures — the largest fine in Commission history at the time. 888 UK received a £9.4 million penalty in September 2022. Entain, the parent of Ladbrokes and Coral, paid £17 million as part of a regulatory settlement after the Commission investigated its handling of VIP customers and source-of-funds checks. These sums are not rounding errors in the industry’s ledger; they change how boards treat compliance.
But here is the problem: the Commission only regulates licensed operators. A non-GamStop casino holding a Curacao or Anjouan licence sits entirely outside that enforcement ecosystem. It does not pay UK GGY levy, does not report to the Commission, and does not contribute to problem gambling treatment funds. The UK consumer is left holding the risk. The legal position is almost absurd: the very operator that is hardest to reach is the one most likely to be used by players who have self-excluded.
The BGH, Germany’s Federal Court of Justice, introduced a separate legal thread that the UK would be wise to watch. In a 2021 judgment, the BGH ruled that an Italian online casino had to refund a player’s losses because the operator did not hold a German licence. The court applied § 134 of the German Civil Code (BGB), finding that the gambling contract was void. That reasoning has been extended in subsequent rulings, including a clear statement that players can claim back money lost on unlicensed platforms run from anywhere within the European Economic Area or beyond. For UK-based players of non-GamStop casinos, the relevance is not direct but it is instructive. If an offshore operator has no valid licence to target a European jurisdiction, the contract may be unenforceable. Whether a UK court would follow the BGH’s logic is untested, but the financial exposure for operators is real.
There is also a more mundane financial danger: banking blocks. A growing number of UK banks have begun refusing or reversing payments to known unlicensed gambling sites. Under the Financial Conduct Authority’s guidance, banks are required to assess the risk of financial crime. Transactions to offshore casinos with weak anti-money laundering controls flag red. It is not unusual for a player to see a deposit declined, or worse, a withdrawal held for weeks because the payment provider suspects the origin is illegal. When that happens, the bank does not care that the player voluntarily signed up. The consequence is frozen funds and an unhelpful customer service team on the other side of the clock.
Then there is the personal liability angle. In the UK, gambling with licensed operators is legal and debts are enforceable. With an unlicensed operator, the player is not breaking the law, but the debt collection practices used by some offshore brands sit in a grey zone. Several non-GamStop casinos demand proof of identity before paying out, then impose high turnover requirements that were not made clear at signup. The primary financial regulator does not recognise these disputes. The last appeal body, the Independent Betting Adjudication Service (IBAS), will not touch a case involving a non-GamStop operator because the adjudication service covers licensed facilities only. In practice, the player has no independent forum. They can try IstGa? No, they can only write to the operator and hope.
The new statutory levy, introduced under the Gambling Act review and fully in force by 2026, adds another layer of separation. Licensed operators now contribute a percentage of GGY to fund research, prevention and treatment of gambling harm. The rate varies from 0.4% to 1.0% depending on the operator’s size and risk category. That money goes to the NHS, to charities like GamCare and to local authority support. Non-GamStop casinos pay nothing. They do not fund the treatment system, even as they increase the number of problem cases entering it. That is not a moral argument; it is a fiscal one. The UK taxpayer ends up paying a share of the healthcare bill that an unlicensed operator would have triggered.
The difference in cost structure is stark. A licensed operator like Bet365, William Hill or Sky Bet must allocate a significant compliance budget to meet the Commission’s Licence conditions and codes of practice. This includes ongoing checks on player affordability, as well as regular interaction with the self-exclusion scheme. That work costs millions of pounds per year. A non-GamStop casino with a Curacao licence buys a piece of paper for a few thousand dollars and sets up a VPN-resistant website. It does not hold UK payment processing directly, using e-wallets or crypto instead. The lack of regulation is not just a legal matter; it changes the unit economics of the business.
Players sometimes argue that offshore sites offer better odds or higher deposit limits. In the short term that is true, mainly because the house saves on compliance costs. But the long-term financial picture is one-sided. Licensed operators are required to separate player funds from operational capital, under the Commission’s revised approach to client money. If a licensed operator goes bust, players are priority creditors. There is no equivalent protection for money held at a non-GamStop casino. If the operator disappears, as several Curacao-licensed brands did between 2022 and 2025, the player sits at the back of a line that leads to a shell company in Curaçao or Malta. Recovering anything is rare; recovering everything is essentially unheard of.
Let us talk numbers. The UK Gambling Commission published its enforcement report for 2023-24, which showed that the Commission took 27 formal enforcement actions and collected more than £60 million in fines and settlement payments. That is a real pile of money, and it flows back to the Treasury. In the same period, the number of complaints about non-GamStop casinos received by the Independent Gambling Panel? No figure exists, because there is no central regulator collecting them. The only quantifiable metric is the number of players seeking self-exclusion. GamStop now has over 450,000 registered users, according to its 2025 report. Yet the operators that advertise to UK players on search and social media regularly ignore that registration. An estimated 10-15% of GamStop users go on to gamble at a non-GamStop site within six months, based on surveys by gambling support services. The exact figure is disputed, but the direction is not.
The BGH’s approach provides a way forward for the UK, if regulators choose to borrow it. Instead of trying to block every unlicensed domain, the focus could shift to the enforceability of consumer contracts. If a court in England were to rule that a contract with a non-GamStop casino is void because the operator did not hold a Gambling Commission licence, then every deposit made by UK players would be recoverable in theory. That would bankrupt the offshore segment overnight. The legal basis is not as shaky as it sounds. The Gambling Act 2005 sets out that remote gambling must be licensed and that providing unlicensed remote gambling is a criminal offence. Under the doctrine of illegality, a defendant cannot enforce a contract that requires the commission of a crime. The player, as a consumer, is not the criminal, so the argument would run that the operator cannot rely on the contract to keep the losses. BGH reasoned exactly this way in a series of decisions after 2021.
Will the UK follow? There are signs that litigation is coming. Several no-win-no-fee law firms in Manchester and London began advertising claims against unlicensed casinos in late 2025. They use the German precedent as a comparative argument, even though an English judgment does not yet exist. The fees are high, around 25% of recovered amounts, which is enough to keep the firms interested. If one such claim reaches a High Court judgment, the entire market will shift. The operator’s only defence would be to prove it had an EEA licence that is valid under the UK’s transitional regime, which hardly any non-GamStop brand can do.
For consumers, the financial takeaway is simple. A non-GamStop casino is a high-risk asset purchase. The money you deposit is not backed by any statutory compensation scheme, and the operator’s interest is not aligned with yours. The fact that a site has a professional look and a functional live chat does not alter the underlying liability structure. In the event of a dispute, you pay first and ask questions later. The only realistic advice is to stick with a licensed operator on GamStop. If you have self-excluded, stay away from any site that does not ask for your GamStop details. That is not a limitation; it is a filter.
It is also worth noting that several brands in the affiliate space, including some on the list of “non-GamStop friendly” reviews, are actually operating under multiple licences and may be on GamStop contrary to the headline. There is no single directory that is both current and accurate. The only definitive test is the operator’s own terms and conditions, which is usually the last place people look. The presence of the GamStop logo at the footer is not a guarantee either, since some sites display logos they do not use.
The enforcement environment is tightening from several directions at once: the Commission has a new fraud and financial crime staff, the National Crime Agency is looking at money laundering through e-wallets, and the UK banking industry is updating its payment screening filters. Each of these measures increases the friction on unlicensed operators. But none of them protects a player who willingly deposits. The only practical defence is exactly the one you already know: do not gamble with a site that is not licensed by the UK Gambling Commission.
If you feel you cannot self-exclude, the Commission’s own Safer Gambling strategy has set up a central blocking system for all licensed sites. It is called GamStop, and it is free. The system works across all UK-licensed operators, and while it is not perfect, it is substantially better than trusting an unregulated platform to honor a self-exclusion request. Non-GamStop casinos do not participate because their business model depends on bypassing the very mechanism that protects problem gamblers. The financial cost of that choice is borne by the player alone.
The legal dust is still settling. The BGH decisions have had no direct effect in the UK, but they have reshaped the conversation among legal scholars who study cross-border gambling. The question is no longer whether an unlicensed operator can be held liable; it is which court will be the first to say so in English. When that happens, the non-GamStop market will look very different. Until then, treat every deposit to such a site as a non-refundable expense, because that is exactly what it is.