The legal position for UK players outside GamStop

The player position, short and long

The short answer is that a UK adult who places a stake with an offshore operator does not, by that act alone, commit an offence under the Gambling Act 2005. The Act creates an offence at section 33 that is squarely directed at the operator, at the party providing facilities for gambling to a customer in Great Britain without a UKGC licence. It does not create a mirror offence for the customer. That reading is the settled position of the statutory text, the accompanying explanatory notes and the enforcement record. The Commission's public bulletins, the House of Commons Library briefings and the specialist practitioner literature all treat the customer as outside the criminal frame of the Act.

The long answer sits in the surrounding statute. Even where the player position is not an offence, the player is still exposed to the ordinary criminal law that operates around gambling activity. Large or patterned inbound transfers from an offshore gambling account to a UK bank account can trigger Suspicious Activity Report obligations at the bank under the Proceeds of Crime Act 2002, and the customer whose account is the destination can find funds frozen while the SAR is investigated. The individual is not the target of the investigation, but the friction is real. Similarly, secondary offences under the Fraud Act 2006 or the Bribery Act 2010 remain available where the underlying activity strays beyond ordinary consumer play. The player position is not criminal, but it is not weightless either.

Section 33 of the Gambling Act 2005

Section 33 of the Gambling Act 2005, as amended by the Gambling (Licensing and Advertising) Act 2014, is the central operator offence. In summary, it makes it an offence to provide facilities for gambling to a person in Great Britain unless the provider holds an operating licence from the UK Gambling Commission or falls within a narrow set of statutory exemptions. The 2014 amendment closed the earlier point-of-supply distinction, moving the rule to a point-of-consumption basis, which is the reason that operators targeting the UK are inside the offence irrespective of where the corporate seat or the server infrastructure is located. The offence is triable either way, and on conviction on indictment carries a maximum of 51 weeks' imprisonment together with an unlimited fine.

The practical consequence for the offshore market is that any operator marketing its remote services to a UK audience, or accepting stakes from a customer in Great Britain, is prima facie within the reach of section 33 if it does not hold a UKGC licence. The Commission's enforcement work therefore begins with a factual assessment of whether the operator has aimed at Great Britain, whether by advertising directed at UK audiences, by UK-facing payment rails, by UK helpline text, by the acceptance of GBP as a settlement currency or by the presence of UK-language marketing content. Where the assessment is positive, the Commission has the statutory basis to act. Where it is ambiguous, the Commission's practice is to seek voluntary cessation before pursuing the harder instruments.

A closer look

Section 33 is not the only relevant provision, but it is the load-bearing one. Section 42 sits alongside it and addresses cheating, an offence often relied upon in a smaller sub-set of enforcement actions. Section 44 addresses invitation to gamble in circumstances that suggest a link to underage or excluded persons. Sections 297 to 302 provide the enforcement mechanics, including the Commission's power to bring proceedings. Section 331 preserves the position on unlawful gambling contracts. Read together, the Act treats the offshore operator as a party bringing prohibited facilities into the UK market and treats the UK customer as a person whose recourse under the ordinary civil law is limited by the character of the contract, but not as a wrongdoer in criminal terms.

Where UKGC jurisdiction stops

UKGC jurisdiction is defined by the operator's licensing status, not by the customer's residence. The Commission licenses, supervises, audits, sanctions and where necessary revokes operators who hold UKGC operating licences. It publishes the Licence Conditions and Codes of Practice that bind those operators, it conducts compliance work against them, it issues regulatory settlements and public statements against them where breaches are found, and it publishes its enforcement returns quarterly and annually. Every one of those instruments requires the underlying party to be a UKGC licensee. Where an operator is not a licensee, the Commission is not the regulator of that operator, and the Commission's supervisory instruments do not reach it.

That boundary is exactly where the offshore market sits. A Curacao-licensed remote operator, an Anjouan-licensed remote operator, a Malta Gaming Authority-licensed operator that is not also UKGC-licensed, all of these sit outside the Commission's supervisory remit even where their websites are reachable from a UK IP address. The Commission can take enforcement action against them as unlicensed operators under section 33, but it cannot supervise them as licensees. That is not a policy failure, it is the design of the statute. The regulator supervises those it has licensed. Those it has not licensed are the target of a different set of instruments, aimed at reducing their reachability rather than at governing their conduct.

What UKGC can and cannot do about offshore sites

Read as a data return, UKGC enforcement against unlicensed operators in the 2024-25 year records more than 770 cease-and-desist notices issued to offshore operators targeting Great Britain, approximately 64,000 URL removals procured through the Commission's co-operation with Google Search and other search platforms, and 264 domain removals procured through co-operation with registry operators and the National Cyber Security Centre's suspended-domain workflow. Those numbers describe the reachability side of the enforcement toolkit. They reduce the surface of the offshore market that a UK adult encounters in an organic search, they slow the pace at which replacement domains reach index parity, and they raise the operating cost of a persistent unlicensed presence. They do not, in themselves, close the underlying operator.

What the Commission cannot do is instructive. It cannot revoke a licence it never issued. It cannot compel disclosure of customer data from an operator outside its jurisdiction. It cannot audit the fund-segregation position of an unlicensed operator, and it cannot direct the operator to fund an Alternative Dispute Resolution body. Its extraterritorial toolset is co-operative rather than coercive. Where offshore operators have been reached in practice, the reach has been secondary, through payment scheme co-operation such as the 2025 Visa, Mastercard and UKGC taskforce on merchant category code enforcement, through banking sector engagement on gambling switches, through search platform co-operation on URL removal and through domain registry co-operation on suspended domains. The instruments reduce access, they do not remove the underlying market.

The complaints path, or the absence of one

The complaints path for a UKGC-licensed operator is well defined. A customer who cannot resolve a dispute with the operator directly may escalate the matter to the ADR provider that the operator is required by its licence to fund. The ADR provider must be UKGC-approved and must operate to a published set of rules. Above the ADR provider sits the UKGC itself, which does not adjudicate individual disputes but does collect systemic complaint intelligence and takes it into account in its supervisory judgments. That layered structure is a working consumer protection ladder, and it is the mechanism by which most disputes with licensed operators are resolved without recourse to the courts.

The complaints path for a non-UKGC operator does not, in practice, exist for the UK customer. There is no ADR provider that the operator is bound to fund. There is no UKGC complaints intake, because the Commission does not adjudicate against unlicensed operators. What remains is the operator's own internal complaints process, if it publishes one, and a theoretical civil claim in the operator's home jurisdiction. The civil claim route is expensive, procedurally difficult from the UK end, and in the great majority of cases disproportionate to the amount in dispute. Consumer forums and Financial Ombudsman Service quarterly complaint tables do carry a share of gambling-related complaints that are ultimately directed at the payment side rather than at the operator, but those routes are narrow.

A closer look

The one place a UK customer of an offshore operator can sometimes gain traction is at the payment-service side of the chain. Where the deposit was made by card, the card scheme's chargeback rules provide a limited window within which a customer can dispute a transaction on defined grounds. Where the deposit was made through an electronic money issuer that is UK-authorised, the issuer is bound by Financial Conduct Authority rules and by the Financial Ombudsman Service jurisdiction for regulated payment services complaints. Where the deposit was made by direct bank transfer, the bank's own dispute processes apply but the recovery odds are lower. None of these are substitutes for a licensed operator's dispute mechanism, and none of them are guaranteed.

Alternative Dispute Resolution and its limits

Alternative Dispute Resolution is a legal instrument, brought into the consumer landscape by the Alternative Dispute Resolution for Consumer Disputes Regulations 2015. In the UK-licensed remote gambling market, ADR is a licence requirement. Every UKGC-licensed operator must appoint and fund an ADR provider whose decisions are binding on the operator up to a defined monetary limit and non-binding on the customer, so that the customer retains the right to litigate if the ADR outcome is unsatisfactory. The ADR provider must be approved by the UKGC and must publish annual data on cases handled, outcomes and average resolution times. The system is imperfect, but it is a mechanism, and the mechanism is tied to the licence.

Outside the licensed market the mechanism does not carry over. An unlicensed operator has no ADR obligation, and no ADR provider is available to a customer of that operator. Some offshore operators refer to internal complaints processes as "dispute resolution", which is a loose use of the phrase that does not import the regulatory features. Others refer to jurisdiction-level regulators such as the Curacao Gaming Authority as points of escalation, and while the CGA has taken on a more visible complaints function since the LOK 2024 reform came into force on 24 December 2024, its complaint handling volume, decision transparency and enforcement outcomes are not equivalent to the UKGC ADR framework. The gap is structural.

White Paper 2023 reforms in force by 2026

The Department for Culture, Media and Sport White Paper of April 2023, titled "High Stakes: Gambling Reform for the Digital Age", presented as Command Paper 835, is the most significant policy statement on the licensed remote market since the Act itself. Its principal instruments in force by August 2026 are the online slot stake caps of two pounds per spin for players under 25 and up to fifteen pounds per spin for players 25 and over, the affordability check framework operating on a tiered basis and calibrated to net deposit thresholds, the Statutory Levy under the Gambling Levy Regulations 2025 in force from 6 April 2025, and a set of adjacent measures on marketing, direct offers and account-level opt-outs that came into effect on a rolling calendar through late 2025 and early 2026.

On the levy, the numbers are worth stating in full. Rates range from 0.1 per cent of gross gambling yield at the lowest band to 1.1 per cent of gross gambling yield for the online remote sector, with the first-year yield forecast at approximately 120 million pounds. Allocation is 50 per cent to NHS treatment, 30 per cent to the Office for Health Improvement and Disparities for prevention, and 20 per cent to research led by UKRI in partnership with the UKGC. The point for readers on this site is that the levy is entirely a levy on UKGC-licensed operators. Offshore operators are not levy-payers, do not contribute to NHS gambling treatment funding and do not participate in the prevention or research streams that the levy underwrites. That is another axis on which the two markets diverge.

A separate current in the White Paper implementation deserves note, because it is the one that intersects most directly with the offshore market. The affordability check framework, as it operates in 2026, requires UKGC licensees to conduct light-touch checks at defined net-deposit thresholds and to escalate to enhanced checks at higher thresholds. The checks are calibrated to the customer's disclosed income and to open-banking or credit-file data where the customer consents to share it. The framework is not universally welcomed by the licensed industry, and it has been reported to displace a share of higher-spend customers toward operators that do not conduct equivalent checks, which in the UK context means offshore operators. That displacement effect is one of the mechanisms behind the population estimates cited in the risks page, and it is a policy-choice consequence that the White Paper acknowledged in its impact assessment. The reader who wants a numerate reading of the 2026 landscape should hold both facts in mind, the licensed side is now more tightly checked than at any point since the Act, and a share of the higher-spend cohort has moved partially or wholly to the offshore side, where none of these checks apply. Neither fact cancels the other, and both belong in the picture.

What the law does and does not protect

What the UK legal position does protect is the consumer of a licensed operator. That consumer benefits from segregated customer funds where the operator holds a designated licence condition, from ADR, from UKGC supervision, from the Advertising Standards Authority's application of the CAP and BCAP codes to marketing communications, from Financial Ombudsman Service jurisdiction over UK-authorised payment routes, and from the underlying consumer contracts framework in the Consumer Rights Act 2015 as applied by UK courts to contracts within their jurisdiction. It is not a perfect protection, and it does not prevent all consumer detriment, but it is a layered protection with a supervisory backbone.

The protection extends into the payment layer as well. Where a UK-authorised card issuer, an electronic money institution or a bank sits in the transaction chain, the Payment Services Regulations 2017 and the Financial Ombudsman Service jurisdiction apply to disputes about the payment service itself. A customer who is unable to obtain a chargeback from the acquirer on eligible grounds may still be able to raise a complaint against the issuer under FCA rules, and unresolved complaints can escalate to the Financial Ombudsman Service. That is not a route to recover the underlying gambling stake in most cases, but it is a defined regulated route for the payment side of the transaction, and it is an example of how the UK regulatory perimeter can reach into a transaction that touches an offshore operator, provided a UK-authorised party is involved somewhere in the chain.

What the law does not protect is the consumer whose contract is with an operator outside the UKGC frame. That consumer is not committing an offence, but they are trading in a contract governed by the law of another jurisdiction, with an operator subject to another regulator, and, in most cases, without an accessible ADR mechanism. Recovery is theoretically possible under civil law, in the operator's home jurisdiction, and practically almost never used. The UK legal position on this is neutral, it neither criminalises the consumer nor extends protection to them. That neutrality is important to state accurately, because the framing that suggests offshore play is either illegal for the player or protected by the UK regulator both misread the statute.

Read next

• GamStop explained, the scheme, the periods, the checks
• The risks, explained without the marketing
• Payments and checks, banks, cards, crypto, KYC
• Coming off GamStop, the official route
• Getting support, helplines, clinics, family, money

Frequently asked questions