Skip to the main text

18+ National Gambling Helpline 0808 8020 133 Help if gambling hurts

Unlicensed casino sites: how to spot one and what it costs you

Licence first, account second. A casino site can look polished and still have no right to take a bet from anyone in Great Britain. Here is how to settle that yourself on the Commission’s register, and what you lose when the answer is no.

Updated

Paper-cut laptop showing a casino table on screen, beside a cracked shield and scattered chips

What makes a casino site unlicensed in Great Britain

The test is narrow. A site may serve customers in Great Britain only if the company behind it holds an operating licence from the Gambling Commission, or relies on the exemption for non-commercial gambling. The Commission’s page on tackling illegal gambling (18 September 2025) says this holds wherever in the world the operator sits, and that a licence granted by another country gives no permission to serve British players.

Location is no signal either way. Several licence holders behind the operators on Playvoralox have addresses in Malta or South Africa, and that is lawful because each holds a British licence. What matters is a live register entry under the right company name, for the right activity, listing the address you are on.

Signs worth stopping for before you open an account

None of these proves on its own that a site is illegal. Each is a reason to visit the register before you type in a card number or a date of birth.

  • Pages where games open carry no statement that the operator is licensed and regulated by the Gambling Commission, or no account number.
  • The licence link lands on the Commission’s front page or an empty register search instead of one company’s entry.
  • The company named on the site is not the one the register shows for that account number.
  • The site pitches itself to people who have self-excluded, for example by saying it sits outside GAMSTOP.
  • You can reach the games without giving your name, address and date of birth.
  • The terms name no dispute service, or set withdrawal limits nobody could reach.

The first three come from the display rules below. The rest echo how John Pierce, the Commission’s director of enforcement, described illegal sites in a blog post of 21 October 2025.

Reading the public register, one tab at a time

Condition 8.1.1 of the LCCP asks a remote operator to show, on every screen that gives access to its games, a statement that it is licensed and regulated by the Gambling Commission, its account number and a link to its current status on the register. A technical note of 11 June 2021 adds that the link must open the licence holder’s own entry, not the register’s opening page, and that the name must match.

  1. Find the licence statement, usually in the footer, and note the account number and company name.
  2. Follow the link. If it opens no single entry, search the register by company name, trading name, domain or account number.
  3. Under Licence summary, an online casino needs the activity Casino Remote, status Active, a date under From and Current under To.
  4. Under Domain names, find the exact address in your browser bar; each domain is marked Active, Inactive or White label.
  5. Glance at Trading names for the brand and at Regulatory actions for sanctions.

Any status other than Active is a reason to stop: the register also uses Expired, Forfeited, Lapsed, Pending, Revoked, Revoked (Non payment of fee), Surrendered and Suspended. Businesses declare their own domains and trading names, and the Commission says it cannot vouch for their accuracy, so read them together with the company name and account number.

When we read the register on 8 November 2026 it held 2,629 business entries. Each answer file on Playvoralox, such as Kwiff, carries the licence holder, account number and register link from that reading.

Paper-cut magnifying glass over a list on paper, with a ticked shield and a casino chip

Protections that end where the licence ends

A British licence is a bundle of duties, and an unlicensed operator has accepted none of them. The table sets each rule beside what the Commission says it finds on illegal sites.

What a licence holder must do, and what goes missing without one
ProtectionRule for licence holdersCommission on illegal sites
Self-exclusionEvery remote licensee joins GAMSTOP (code 3.5.5)Self-excluded people are sought out
DisputesFree ADR after eight weeks (SR 6.1.1)Often no dispute scheme
Your balanceSeparate client account (LCCP 4.1.1), level disclosed (4.2.1)Withdrawals blocked or capped out of reach
Age and identityChecked before play (LCCP 17.1.1)Age checks often absent
Fair playFair and open gambling, safer gambling tools, secure paymentsUnfair games, no tools, data at risk

GAMSTOP has run since April 2018, and the lists it shares with licence holders refresh every 24 hours. At an industry event in Barcelona on 19 January 2026, the Commission’s Tim Miller described self-excluded people as a major part of the audience of illegal sites.

A licensed operator must let you take a complaint still open after eight weeks to a dispute body that charges you nothing and is accredited by the Secretary of State under the Digital Markets, Competition and Consumers Act 2024; its terms cannot remove your right to go to court. Under LCCP 17.1.1 it also confirms who you are before play and, unless the law requires otherwise, cannot hold up a withdrawal over details it could have asked for earlier. Balances are covered in protection of player funds, other checks in financial risk checks.

What the Gambling Act 2005 actually says

We read three sections on the government’s legislation website, in the version shown as up to date on 6 and 7 November 2026.

Section 33: offering gambling with no licence

Providing facilities for gambling is an offence unless the provider holds an operating licence and keeps to its conditions, or another exception applies. On summary conviction: up to 51 weeks in prison (six months in Scotland), a fine up to level 5, or both.

Section 36: the operator’s base is irrelevant

Remote gambling is caught if any remote gambling equipment is in Great Britain, or if none is but the service is used here. In the second case the operator is guilty only if it knows, or should know, that people here use it or are likely to (section 36(3A)). This has applied since 1 November 2014, under the Gambling (Licensing and Advertising) Act 2014.

Section 330: advertising unlawful gambling

Advertising gambling that lacks a required licence is a separate offence, with defences for a reasonable belief in lawfulness (330(4)) and for carriers with no control over content (330(6)). Penalties mirror section 33, and each day an advert runs is a fresh offence (330(8)).

Section 331 on foreign gambling was repealed from 1 November 2014, so older guides that cite it are out of date. The Commission can prosecute in England and Wales; in Scotland that rests with the Crown Office and Procurator Fiscal Service.

The illegal market in the Commission’s November 2026 figures

On 5 November 2026 the Commission published survey results, a data dashboard and a speech by its acting chief executive, Sarah Gardner.

  • Survey. A new index from the Gambling Survey for Great Britain (April 2025 to April 2026) found 0.6% of adults had used an illegal site in the past four weeks and a further 0.4% in the past 12 months; among online gamblers, 2.5% and a further 1.5%.
  • Supply. 586 illegal sites reachable from Great Britain in September 2026, with 97 affiliate pages pointing to them; 4% of Google results for general gambling searches led to one.
  • Demand. Searches like “not on GAMSTOP” were 53% below the three-month average and 22% below September 2025.
  • Disruption. Action was taken against 311 sites in the second quarter of 2026–27, up 38%, and 77% of them then lost traffic.
  • Enforcement. From April to September 2026: 1,005 cease and desist letters, against 741 in all of 2025/26, and 1,668 sites taken down or geo-blocked, against 1,134. The government has given the Commission £26 million over three years for this work.

The dashboard counts only sites found through search and not geo-blocked when checked, and the Commission says it is not a full count. It gives no money value for the black market either; a report of 6 November 2025 explains why that is hard to estimate, so Playvoralox repeats no outside figure. The Commission calls engagement low and stable across the population, yet says users of illegal operators are more likely to suffer harm.

Copied brands and look-alike addresses

The blog of 21 October 2025 lists habits the Commission sees: rotating domains, cloaking, hiding inside other websites, advertising through Google Maps, crypto payments and brands built with AI tools. A familiar logo is therefore weak evidence.

Before you sign in or pay, check the address bar. Read the whole domain, not just the brand inside it, and compare it letter by letter with Domain names on the register entry. If it is missing or Inactive, reach the brand again through the register, not through an advert or a link in a message. Some licensed brands forward one domain to another; answer files such as MrQ say which address our link uses.

When a search promises sites “not on GAMSTOP”

Every British licence holder offering online gambling must honour a GAMSTOP self-exclusion, whether it runs for half a year, a full year or five years. A site that sells itself as outside the scheme is therefore admitting it has no British licence.

If you set up a self-exclusion and now catch yourself looking for a way round it, that is worth taking seriously. Talking it through costs nothing: 0808 8020 133 is the National Gambling Helpline’s number, open around the clock, and help if gambling hurts lists blocking tools and other support.

Reporting a site you think is unlicensed

The Commission’s “Tell us something in confidence” service takes reports of unlicensed gambling, along with money laundering, gambling by children and match-fixing. Reports stay confidential and you will not hear how they progress. The Commission also notes that card schemes and wallets such as Mastercard, Visa and PayPal can switch off payments to a business with no licence. Give the full address, the brand name, any account number shown and where you found the link.

It is not a complaints desk. A dispute with a licensed operator goes to that operator first, then after eight weeks to the dispute service in its terms; the Commission settles no individual disputes. An unlicensed site usually offers no such step, which is the best reason to check first.

Questions readers ask

Does a casino licence from another country count here?

No. The Commission says a licence issued elsewhere does not allow an operator to serve players in Great Britain. Many British licence holders are based abroad, but what makes them lawful here is their Gambling Commission licence.

The site shows a Gambling Commission logo. Is that enough?

No. A logo is easy to copy. What counts is an account number, a link that opens that company’s own register entry, and your address listed under Domain names there.

How do I know a register entry belongs to the site I am on?

Match the domain in your browser bar with Domain names and the brand with Trading names. The business supplies both lists itself, so compare the site’s licence statement too: its company name and account number should match the entry.

Will the Commission recover my money from an unlicensed site?

The Commission does not settle individual disputes, and its confidential service neither handles complaints nor reports back. A report helps it act against the site; it is not a route to getting a balance back.

Cookies and similar storage

One small record is kept in your browser without asking: the choice you make in this panel. Two optional tools need your agreement first. Google Analytics 4 would tally how many people visit and which pages they open, without singling anyone out, and Google Ads would tell us whether people arrive from our own adverts. The Google tag loads them only after a yes. You can change this whenever you like through “Cookie preferences” at the bottom of every page. How cookies are used here