New gambling sites are operators that have launched or been rebranded recently, and in the UK only those holding a Gambling Commission licence may take British customers — meaning sites licensed in Great Britain keep every UK protection, while offshore sites carry none of them, and a dispute has a route only with the first group.
A new site is rarely a new company. Most launches are an old licence attached to a fresh domain name, a new payment stack or a marketing team that has changed hands. When I look at a launch now, I look at three things: when the licence was granted, who is behind the trading name, and what the site does with a withdrawal request. Only the third one matters to a player, and it is the one the marketing never mentions.
That may sound cynical. It is not. British gambling in 2026 is a market where total Gross Gambling Yield across Great Britain reached £17.5 billion in the year to March 2026, up 4.4 per cent, with remote casino, betting and bingo contributing £8.3 billion of it. That is a large prize, and it explains the queue of new domains. It also explains why so many of them arrive dressed as UK brands while sitting on a Curaçao or Anjouan certificate, or on no certificate worth the pixels it is rendered in. The distinction is not a technicality, and this column treats it as the main event.
The date of reference for everything below is 13.11.2026.
Upfront, because it belongs near the top of any page like this: offshore sites are not licensed in Great Britain. UK protections — the £2 stake limit for younger slots players, the ten-times wagering cap, the ban on charging withdrawals to a credit card, access to an approved dispute body — do not apply to them, because they are not UK-licensed operators. GamStop self-exclusion does not reach them either. If gambling has become a problem, the National Gambling Helpline is 0808 8020 133, free and open 24 hours a day, every day, run by GamCare. One short aside on the name itself: the scheme is often typed "gamestop", which is a spelling slip and nothing more — the scheme is GamStop.
Table of Contents11
- What the Licence Tells You
- Where New Sites Come From, and Why the Flag Matters
- Comparing New Sites by the Terms That Decide the Experience
- Bonus Terms That Build Delay
- Who Decides a Dispute
- Five Signs a New Operator Can Be Trusted
- How to Look at a New Site Before Depositing Anything
- What the Volume Says
- Changes This Year
- Questions About New Sites
- Where a New Site Can Actually Be Held to Account
What the Licence Tells You
Every new site asking for a British card must hold a Commission operating licence, and the register is public. That single check sorts the market into two piles, and the piles behave nothing alike.
Since 31 March 2020, participation in GamStop has been a licence condition — provision 3.5.5 of the Commission's Licence Conditions and Codes of Practice states that licensees must participate in the national multi-operator self-exclusion scheme. Since April 2020 operators have also had to screen their entire customer base against the register at least every 24 hours, which is what stops a marketing email arriving at an address that has been excluded from gambling. Two operators had their licences suspended in April 2020 — one licensee, the other under the name Sportito — for missing the integration deadline under section 118(2) of the Gambling Act 2005. The Commission does not treat this paperwork as optional.
A licence is also the hinge for the things players actually notice. Licence condition 17.1.1 requires identity information to be obtained and verified before a customer is allowed to gamble, and it forbids an operator from demanding fresh documents at withdrawal when it could reasonably have asked for them earlier. Licence condition 7.1.1 requires terms to be fair and not misleading. Neither of those is an offshore rule.
The scheme has scale behind it. GamStop recorded 117,756 new registrations during 2025 and reported 561,983 active exclusions at the end of the year; by July 2026 the register held 614,738 people. Registrations in the first half of 2026 ran 16 per cent ahead of the same period a year earlier, with May 2026 setting a monthly record of 12,236 sign-ups, and under-25s taking nearly one in three of them. None of that has anything to do with a new offshore domain, and everything to do with why offshore domains want British players in the first place.
Where New Sites Come From, and Why the Flag Matters
Before looking at payouts or bonuses, look at the regulator named in the footer. It tells you most of what you need to know about what happens when something goes wrong.
Regulators that work as regulators
The Malta Gaming Authority requires a B2C licence for an entity offering a gaming service from Malta, charges a non-refundable fixed annual licence fee of EUR 25,000 plus a one-time EUR 5,000 application fee, and takes five per cent gaming tax. It maintains a published list of Unauthorised URLs, declaring any reference to a Maltese licence on those domains false and misleading. Malta is not the British regime, and a Maltese licence will not give a British player access to the Commission's dispute machinery, but it is a licensing authority with published rules and a list it is prepared to put out.
Curaçao's reform is real, and still settling
Curaçao has replaced the old master-licence model. The National Ordinance on Games of Chance took effect on 24 December 2024, the Curaçao Gaming Authority became the direct licensing and supervisory body, and the legacy orange sub-licence certificates ended on 15 October 2025. Licensing ceased for the four former master licensors between August 2024 and January 2025. Provisional licences were granted by operation of law and extended to 24 December 2025, and the CGA announced on 7 October 2026 that its previous online portal would not return, so it is working on another way to verify licensed domains. Supplier licensing becomes fully mandatory in Curaçao from 24 December 2026. A site still waving a /JAZ number is showing a historic identifier, not proof of a current licence.
Anjouan Licensing Claims
Anjouan issues B2C and B2B internet gaming licences under legislation adopted in 2005, at EUR 17,828 for issuance and the same for annual renewal, with EUR 500 per additional domain. Its published standards require segregated player funds, certified random number generators and anti-money-laundering controls, which is more than nothing. But an ABC News investigation published on 31 December 2025 reported that the administrator claims to have issued more than 1,300 licences, and that a former attorney-general of the Comoros called the selling entity "an illegal entity". Anjouan Gaming itself said on 10 June 2026 that its licence "is not, and has never been presented as, a universal authorisation to operate in every country in the world". Read that sentence again and decide how much weight a footer logo deserves.
Kahnawà:ke and the licence behind the licence
The Kahnawà:ke Gaming Commission has regulated interactive gaming since 1999 and issues a single Interactive Gaming Licence, held since 1999 by Mohawk Internet Technologies, plus Client Provider Authorizations. Its logo programme lets a player generate a Certificate of Good Standing. Its terms are striking in places: a self-exclusion under Kahnawà:ke rules is permanent and irrevocable, and a player who breaches one forfeits deposited and won funds to a charity the Commission selects. That is a harder line than Britain takes. It is also a completely separate system, with a full-time Dispute Resolution Officer and no connection to GamStop.
Costa Rica, and the "data processing" licence
Costa Rica has no comprehensive gambling licensing regime. The "data processing license" so often cited in industry copy is not a licence in the legal sense. A bill that would have created a mandatory regime, No. 25,057, was rejected in early 2026. If a new site names Costa Rica and little else, it is not licensed in any meaningful way, and its footer is decoration.
Comparing New Sites by the Terms That Decide the Experience
Brand names change; mechanics do not. The table below compares an average UK-licensed launch with three common offshore profiles, on the terms that determine whether money arrives and how a complaint ends.
| Criterion | UK-licensed new site | Curaçao-licensed | Anjouan-licensed | No credible licence |
|---|---|---|---|---|
| Self-exclusion route | GamStop, by licence condition since 31 March 2020 | None through GamStop | None through GamStop | None through GamStop |
| Wagering cap on bonus funds | 10 times, from 19 January 2026 | 25x–40x typically | 25x–40x typically | Unstated or unlimited |
| Maximum withdrawal limit | Prohibited on the deposit balance | Common as a cashout cap | Common as a cashout cap | Frequently applied silently |
| Dispute route if unpaid | Approved ADR body, free, after eight weeks | Operator-nominated ADR, if any | One of four approved ADR providers, 30-day internal stage first | None beyond the operator |
| Published withdrawal evidence | 96.3% of 44.2m withdrawals cleared automatically, June–September 2024 | Not published | Not published | Not published |
| Deposit limit prompt | Required before first deposit, from 31 October 2025 | Not required | Not required | Not required |
The wagering column is where the table earns its keep. On 19 January 2026 the Commission capped wagering requirements at ten times under Social Responsibility Code 5.1.1, after declining to ban them outright; its own reasoning was that the cap "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements". A site advertising 40x is not being generous or stingy — it is simply outside the regime, which is a different statement altogether.
Bonus Terms That Build Delay
A bonus is not a gift with small print. It is a contract, and the small print is the contract.
On a UK-licensed site, the ten-times cap means a £10 bonus carries £100 of wagering, and deposit and bonus balances have to be shown separately, with the deposit balance withdrawable at any time even while a bonus is active. Operators also cannot impose a maximum withdrawal limit on the deposit balance — the Commission's own example of a prohibited term is "You may withdraw up to £50 per day and up to £500 per week". The same rules ban mixing product types in one incentive, so a bet-and-get-free-spins offer of the cross-product kind is gone.
Offshore, the terms are the product. No-deposit bonuses typically carry 40x to 60x with a cashout cap, while deposit bonuses run in the 25x to 40x range. One widely available offshore casino makes its deposit bonuses subject to a 25-times playthrough requirement, with a contribution chart that credits slots at 100 per cent but roulette and baccarat at 5 per cent and live dealer games at zero — so a player pushing £500 through roulette at that weighting has credited £25 towards the target. Others limit withdrawal of winnings generated with bonus funds to 300 per cent of the credited bonus, voiding the excess, and cap the maximum bet while wagering at around €5 for regular players. Breach that cap and the terms allow account closure and forfeiture of the bonus and any winnings from it.
Then there is the timing: many offshore sites process withdrawals in batches, on business days, with a manual review stage. Nothing in the table above will surprise anyone who has waited five days for a payment that was never really at risk.
Who Decides a Dispute
If a British-licensed operator withholds money, there is a defined path and someone at the end of it whose decision counts. That is the whole difference, and it is worth understanding before any of the rest.
How the route works the first time
Treatment must be raised with the operator first. Social Responsibility Code 6.1.1 requires a licensee to have arrangements for a customer to refer a dispute to an approved alternative dispute resolution entity free of charge if it is not resolved within eight weeks of receipt, and the Commission's guidance says the entire internal process should finish inside eight weeks — with the clock pausable if the customer does not answer a reasonable request for information within seven days. The operator can issue a deadlock letter confirming the customer may go straight to ADR. Guidance also says complaints should be accepted for at least six months from the date of the incident.
How it works later, and what it costs
Once at ADR, the numbers get sobering. eCOGRA's report for 1 October 2024 to 30 September 2025 recorded 911 disputes, of which 150 valid ones concerned deposits and withdrawals; the average domestic resolution time was 31 days, and 17.8 per cent of completed disputes were decided in the consumer's favour. IBAS's report covering 1 October 2024 to 30 September 2025 recorded 3,721 domestic disputes, 217 of them banking or financial, with an average completion time of 20 days and just 65 complaints upheld by written decision. IBAS reports 100 per cent operator compliance with decisions in the consumer's favour across two years, which is worth something: the award is paid.
ADR is not a court and will not hear everything. Providers generally will not take customer-service grievances, or a refusal to accept a bet or a customer's custom, and eCOGRA may decline disputes arising more than a year ago. The Commission itself is a regulator, not an ombudsman — it cannot get anybody's money back, though it records complaints.
Where an offshore dispute ends
At the operator. Anjouan requires its licensees to name an approved ADR provider in the player-facing terms and to resolve complaints within 30 days before escalation; its approved list runs to four providers. Kahnawà:ke has a Dispute Resolution Officer. Malta takes complaints by form. None of this is the British arrangement, and none of it is free-standing if the operator simply stops answering. With no licence in Great Britain there is no licence to lose, and an unlicensed site can be disrupted — the Commission's Illegal Markets team issued 3,140 cease and desist and disruption notices from April 2024, referred 447,778 search URLs and secured 287,961 removals — but disruption is not a refund.
The warning signs in a complaint route
A terms page that names no ADR provider, or names one that does not exist, is telling you where this ends. So is a support desk reachable only through an in-site widget, a complaints clause requiring disputes in a distant jurisdiction, or a term letting the operator alone decide whether play breached a promotion — the Commission's fair-terms guidance explicitly forbids reserving sole discretion of that kind. The most useful single test is the least dramatic: ask a factual question about withdrawals before depositing, and note whether the answer is specific or a policy link.
Five Signs a New Operator Can Be Trusted
None of these requires a deposit. All of them take minutes.
A licence that matches the trading name and domain
Check the Commission's public register and click through to see whether the site's activities and domain names are listed. A licence held by a different company, or covering a domain nobody recognises, is the first warning. For a Curaçao certificate, clicking the Certificate of Operation seal must redirect to the CGA's certification site, and the domain on the certificate must be the one being visited — a certificate for somebody else's domain means the site is unauthorised or fraudulent.
Participation in GamStop, statable in plain words
Since 31 March 2020 it is a licence condition, so any UK-licensed operator is in the scheme, whether the marketing says so or not. Offshore, absence is total. Kahnawà:ke's own permanent and irrevocable self-exclusion and Anjouan's requirement to segregate player funds are worth something, but they are not substitutes.
Terms a reader can finish
Wagering multipliers, maximum cashout clauses, maximum bets while wagering and withdrawal processing windows should all be findable in one click. Under SR Code 5.1.9 significant conditions applying to marketing incentives must be provided transparently and prominently. If the bonus terms run to thousands of words in a sub-clause that contradicts the landing page, that is the answer.
A payout with published evidence behind it
The Commission's data covering June to September 2024 records 44.2 million withdrawals by customers of large online operators, of which 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours and 0.1 per cent took up to 48 hours. Those figures cover licensed operators. No comparable offshore figure exists, and the absence is the point.
A named, approved dispute body
For a British licence, one of the approved providers: ADR Group, Pegasus ADR Service, Blexr, CEDR, eCOGRA, IBAS, ProMediate or the Tattersalls Committee. If nobody is named, the last step of the process is a support email.
How to Look at a New Site Before Depositing Anything
Ordinary checks, in order, each with a reason.
- Confirm the licence on the register, and match the domain. Type the trading name into the Commission's public register and follow the licence through to its listed domain names. Reason: the register is the only check that separates a UK site from a site wearing UK branding on foreign paper.
- Read the payout page and the withdrawal terms together. Look for a stated processing window, a named adjudicator of any delay, and whether a fee is charged for withdrawal. Reason: terms that are silent on timing, or that promise a "review" without a deadline, are describing a delay they have already decided to build in.
- Work out the true value of the welcome offer. Divide the bonus by the stated multiplier, check the game weighting, and check whether any maximum cashout applies. Reason: a 40x requirement weighted at 5 per cent on the games a player actually likes is a much longer road than the headline number suggests.
- Do the identity check early, not at withdrawal. Send the documents the site lists before depositing, and keep the acknowledgement. Reason: identity verification is the single largest source of complaints reaching the Commission's contact centre — over a quarter of them according to its August 2026 blog — and getting it done at onboarding removes the excuse.
- Set a deposit limit in the first session. Since 31 October 2025 operators must prompt for a financial limit before the first deposit, and RTS 12E makes the limit the default that has to be actively declined. Reason: a limit set before anything is at stake is a decision; the same limit set after a losing run is a negotiation.
- Keep a dated record of everything material. Screenshot the bonus terms on the day claimed, and save the withdrawal request confirmation with its timestamp. Reason: if this ends in ADR, the case turns on what the terms said when the offer was taken and when the request was made.
What the Volume Says
Plenty of new domains, very little new appetite for the illegal ones — that is what the Commission's own survey data suggests, and it is worth putting next to the marketing claims about a black-market boom.
Its analysis published on 5 November 2026, covering April 2025 to April 2026, estimates that across the whole adult population 0.6 per cent had engaged with an illegal gambling website in the past four weeks and a further 0.4 per cent in the past 12 months, while 94.4 per cent showed no indication of using one. Among respondents who had gambled online in the past four weeks, the estimated figure was 2.5 per cent. The dashboard recorded 586 illegal gambling websites accessible to British consumers in September 2026, four per cent more than September 2025, and 311 illegal websites had disruption action taken against them in the second quarter of 2026-27, 38 per cent more than the previous quarter, with 77 per cent of disrupted sites seeing a fall in estimated traffic. Registrar blocks and website suspensions produced the largest average fall in engagement in the Commission's earlier work — 91 per cent each — ahead of GEO IP blocking at 60 per cent.
Industry and trade estimates run far higher. H2 Gambling Capital put stakes with illegal operators at £16.6 billion in 2025, up from about £5 billion in 2019, with the legally handled share falling from 97 per cent to 92 per cent. A Frontier Economics study for the Betting and Gaming Council estimated £2.7 billion staked annually online on the black market, or 2.1 per cent of the £128 billion staked with British-regulated remote operators. Yield Sec put the unregulated share of 2025 GGR at nine per cent. Those three figures cannot all be measured the same way, because they are not: the Commission's own methodology notes that it does not capture activity hidden behind VPNs. The honest reading is that nobody knows the true total, and everyone quoting a confident one is selling something.
Changes This Year
A launch in 2026 arrives into a tighter regime than one from five years ago, and the difference is mostly felt after the deposit clears rather than before it.
The biggest change is on bonuses. From 19 January 2026 wagering on bonus funds is capped at ten times and mixed-product promotions requiring two or more gambling types are banned, both via Social Responsibility Code 5.1.1. Financial vulnerability checks became a requirement in August 2024 at £500 net deposits over 30 days and were lowered to £150 from 28 February 2025; in the first three months of operation operators ran them on seven per cent of active accounts on average, with 78 per cent returned within ten minutes. Financial Risk Assessments were announced on 7 July 2026 and will be phased in, starting with the largest operators at £5,000 net deposits in a rolling 24 hours for customers aged 25 and over and £2,500 for under-25s, moving eventually to £1,000 in 24 hours or £3,000 over 90 days for over-25s. The Commission has confirmed no enforcement action in the early stages for failing to act on an assessment, though every other licence requirement still stands. The £5,000 first-stage threshold is a pattern fewer than 0.5 per cent of customers exceed.
Stake limits bite on slots: £5 per game cycle for all adults since 9 April 2025, £2 for 18 to 24-year-olds since 21 May 2025, and at least 2.5 seconds between game cycles. Deposit limits have been prompted before first deposit since 31 October 2025. And since 6 April 2025 the statutory levy has replaced voluntary contributions, charging 1.1 per cent of previous-year Gross Gambling Yield from online operators, raising just under £120 million in the year reported and ringfenced for research, prevention and treatment.
The counterweight is enforcement capacity. Across April 2025 to March 2026, every quarter recorded zero or one prosecutions commenced — one in total. Companies are disrupted, sites are de-indexed and licences are surrendered, but criminal prosecution of offshore operators is not the mechanism, and treating it as though it were is a mistake the trade press makes regularly.
Questions About New Sites
Are new gambling sites safe to use?
That depends entirely on which licence sits behind them. A site holding a Commission licence meets the standard that protects a British player: GamStop participation by licence condition, the ten-times wagering cap from 19 January 2026, no maximum withdrawal limit on the deposit balance, and access to a free approved dispute body after eight weeks. A site licensed only offshore has none of that, whatever its design suggests.
Can a new offshore site get round a GamStop self-exclusion?
An offshore site is not connected to GamStop, so signing up there is possible in the narrow technical sense, and it is a terrible idea that this column will not dress up as a workaround. Under GamStop's terms the exclusion holds for the chosen term and then stays in place until the person contacts GamStop to remove it — it cannot be cancelled or deactivated during the period. The Commission warned operators about unlicensed sites targeting exactly this group in a notice on 20 January 2025.
How long should a withdrawal take at a properly licensed site?
Fast, by the regulator's own data. The Commission's figures for June to September 2024 covering 44.2 million withdrawals from large online operators recorded 96.3 per cent clearing automatically, 3.5 per cent within 24 hours and 0.1 per cent taking up to 48 hours. There is no stated maximum number of days in the licence conditions, which is why terms matter, but withdrawals are the number one subject of complaints to the Commission — around 2,000 a year by July 2024 — so speed is a norm rather than a guarantee.
Why does a site suddenly ask for documents when I withdraw?
Because identity checks were deferred to the point of a withdrawal, which licence condition 17.1.1 addresses: a request for documents must not be created by the withdrawal if the operator could reasonably have asked earlier. Anti-money-laundering duties are the legitimate exception, and the €2,000 threshold under the 2017 Regulations is where a remote casino must identify and verify. Onboarding with a middle name or nickname instead of a full forename can also break matching against the GamStop register.
Do payment methods change how quickly a new site can pay out?
They do, and the differences are quantitative. Faster Payments has a £1 million scheme ceiling and most payments complete in under two seconds, though individual banks set lower limits. Visa Direct's Fast Funds model can put money on a card within 30 minutes of approval. Crypto depends on confirmation counts: Bitcoin averages a ten-minute block but a block is only about 63 per cent likely within that window and six confirmations are typical, while a USDT transfer on TRON costs roughly 13 TRX without staked Energy.
Is it worth complaining to the Gambling Commission?
Not for the money. The Commission is a regulator, not an ombudsman, and it cannot resolve individual complaints or recover funds, though it records all of them and typically refers disputes to an independent third party. The route with teeth is the operator's own procedure first, then an approved ADR provider free of charge once eight weeks have passed — and for an offshore licence, whichever of Anjouan's or Kahnawà:ke's arrangements that regulator provides.
Where a New Site Can Actually Be Held to Account
A launch is a licence, a domain and a set of terms, and only the third of those is negotiable — which is why the register check takes two minutes and saves a great deal of argument later.
The British arrangement is not generous, but it is legible: a licence condition that forces GamStop participation and 24-hour screening of the customer base, a ten-times wagering cap, an explicit ban on demanding documents that could have been sought earlier, and an ADR provider at the end of an eight-week clock whose decisions operators comply with. The offshore arrangement is a footer, a seal and a support widget. One consequence of the difference is measurable: across 160 illegal gambling websites in the Commission's disruption data, engagement fell by an average of 32 per cent after enforcement action, and the Commission's regulators-versus-ombudsman split means that fall is the closest thing to a refund an unlicensed site's customers will ever see.
GamStop's register held 614,738 people as of July 2026, more than one in two of them on the maximum five-year term. That number is a fact about the market rather than a warning about any individual, and it is the clearest argument for keeping the licence check at the front of the process and the National Gambling Helpline — 0808 8020 133, free, 24 hours a day — at the back of it.