A mobile casino not on GamStop is an offshore site with no Gambling Commission licence, so it sits outside the UK's national self-exclusion scheme. It is not licensed in Great Britain, UK protections do not apply, and it is never a way round an exclusion. A GamStop term holds for its full length and then stays in place until the person contacts GamStop to remove it.
The phrase "pay by mobile" carries a lot of meaning for very few words, and most of it is wrong. Two different things get bundled together: paying from a phone bill, and simply being on a phone. The offshore sites that accept a phone-bill deposit are a narrow, awkward set, and the ones that matter to a British reader are narrower still. Meanwhile the exclusion scheme that this keyword is built around is the most misunderstood piece of British gambling regulation there is — including, apparently, by some of the people selling against it. I have read the terms of use more than once, and they are unusually blunt: you cannot cancel, you cannot shorten it, and the clock is not what you think it is.
Pay by mobile is a payment method; not being on GamStop is a licensing status. The two get confused because both sound like shortcuts. Only one of them is a feature.
It is also worth saying early that the scheme is often typed "gamestop", after the game shop. It is GamStop: capital G, capital S, one T in the middle of the joined word and the emphasis on the stop.
Table of Contents12
- What Pay-by-Mobile Actually Means at an Offshore Casino
- The Number That Sets the Standard
- How an Offshore Licence Compares With a British One
- The Regulator Does Chase These Sites
- One in Fifty Players, and a Warning About Chasing Them
- Why Payout Terms Are the Real Trap
- What an Identity Check Looks Like, First Time and Later
- How Self-Exclusion Actually Ends
- Five Signs an Offshore Operator Can Be Judged On
- A Method for Checking a Site Before Depositing
- What the Numbers Say About Why People Reach for the Wrong Site
- The Point of All This
What Pay-by-Mobile Actually Means at an Offshore Casino
Understanding how pay-by-mobile actually works
The head phrase of this cluster promises something concrete: a casino where the deposit arrives out of your mobile credit or phone bill, and where the site sits outside the national scheme. Those two facts are connected in a way that is more about plumbing than about policy.
Paying from a phone bill is a carrier-billing transaction. A payment intermediary bills a mobile number, the network collects, and the merchant is paid, usually after a deduction. British network rules for gambling merchants are restrictive: the largest carriers stopped allowing gambling charges to phone bills years ago, and the intermediaries that remain generally require the merchant to hold a licence from a regulator the carrier recognises. An operator with no Gambling Commission licence and a licence from a small island registry is not a merchant most carriers will touch.
The practical result is that phone-bill depositing has shrunk to a minority of offshore sites, and where it survives it is usually a third-party voucher or an app-store style credit rather than a clean carrier charge. A site that advertises "pay by mobile" in 2026 is often describing a mobile-optimised card or e-wallet flow, not a phone-bill debit at all. That is not a small distinction. It changes who is paid, who can reverse it, and what happens when it goes wrong.
The mobile credit version of the service
The phone-credit version is real, and it is worth pricing honestly. When it exists, the cost normally appears as a premium on the credit itself: a top-up of a given cash value buys fewer units of playing currency. That spread is a fee in all but name, and it is invisible in the way a bank charge is not.
There is a second cost, and it is the one I would raise first. Money spent from phone credit never passes through a bank account, so the bank gambling blocks that more than a dozen British banks now offer — activated at card level, declining payments tagged under gambling merchant codes — do not intercept it. Neither does a card-level cooling-off period. A player who has built a stack of protections out of bank blocks, blocking software and a self-exclusion has, in a phone-bill deposit, found the one rail that bypasses most of the stack.
The caps on phone bill deposits
Carrier billing also carries a hard ceiling, which is a fact worth knowing before believing any headline offer. Mobile credit balances are small by design, and networks impose per-transaction and per-month limits on charge-to-bill payments. A deposit made this way is a tenner or a few tens of pounds, not a funding plan.
That ceiling cuts both ways. It makes phone-bill gambling a low-stakes method by construction, which is a genuine, if accidental, harm-reduction feature. It also makes the method useless for reaching the deposit levels at which operators begin asking about source of funds — so a phone-bill player may sail past one check while remaining fully exposed to every other risk of an unlicensed site, and still face document requests the moment they try to withdraw at a size worth withdrawing.
The single test for operator quality
Strip the marketing away and there is a single test that separates the tolerable offshore operation from the one that should be avoided: does it verify you properly, and does it pay? Everything else — the app polish, the game count, the bonus headline — is decoration. A site with a clean identity check on the way in and a payout on the way out is a site with something to lose from bad behaviour. A site that skips the check on the way in and invents one on the way out has quietly arranged matters so that the only person who can lose is the customer.
The Number That Sets the Standard
The comparison I would use for offshore payout behaviour is the one the Gambling Commission published from its own licensed market. Commission data covering June to September 2024 recorded 44.2 million withdrawals by customers of large online operators. Of those, 96.3 per cent cleared automatically, 3.5 per cent cleared within 24 hours and 0.1 per cent took up to 48 hours — which is, in effect, everything inside two days.
That is the benchmark a British reader has been trained by, and it is not a flattering one for the offshore market to be measured against. It also explains something the Commission keeps saying about its own licensees: withdrawal complaints have long been the single largest subject raised with its Contact Centre, and its Annual Report and Accounts for 2024-25 confirms that even after work with operators, withdrawals continue to cause most of the complaints it receives. Complaints coded "Withdrawals and/or financial transactions" did fall from 2,416 in the year to December 2022 to 1,791 in the year to December 2025 — progress, but on a complaint base that never went away.
So the standard to hold an offshore site to is not perfection. It is two days, automatically, without a document request that could have been made on day one.
How an Offshore Licence Compares With a British One
| Criterion | British licence (Gambling Commission) | Offshore licence (Curaçao, Anjouan, Kahnawà:ke) |
|---|---|---|
| Regulator | Gambling Commission, public register of domains | Island or territory authority; Curaçao's is the CGA |
| Self-exclusion | Must join the national scheme; licence condition since 31 March 2020 | Not connected to the scheme |
| Bonus wagering | Capped at 10× on bonus funds from 19 January 2026 | Commonly 25× to 60×, with cashout caps |
| Credit cards | Banned for gambling since 14 April 2020 | No equivalent ban |
| Stake limit on slots | £5 per cycle, £2 for 18 to 24s, since 2025 | None |
| Payout benchmark | 96.3 per cent of withdrawals clearing automatically (June to September 2024) | No published equivalent |
| Dispute route | Approved ADR provider, free to the consumer | Operator-named ADR, or nothing |
| Licence cost signal | Operating licence plus statutory levy at 1.1 per cent of online GGY | Curaçao B2C: EUR 4,592 to apply, EUR 47,450 a year |
Two of those rows deserve a sentence each. The British licence has quietly accumulated obligations that shape what the product even is: since 31 March 2020 participation in the national self-exclusion scheme has been a licence condition, sitting in social responsibility code 5.5 of the Commission's codes, and the 10× wagering cap that arrived on 19 January 2026 was introduced with an unusual admission attached — the Commission said the limit "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements". Offshore terms of that shape were not a rumour; they were the reason for the rule.
The other point is what a licence fee tells you. Curaçao's regulator charges a one-time non-refundable EUR 4,592 to apply for a B2C licence and EUR 47,450 a year in total fees. Anjouan publishes EUR 17,828 to issue and the same to renew. Those figures are not proof of anything about a specific operator, but they are a reminder that an offshore licence is a purchase, and that a purchased licence from a small jurisdiction supervises a site less tightly than a regulator with a public register, a levy and an enforcement team.
The Regulator Does Chase These Sites
It would be lazy to describe the unlicensed market as unpoliceable. The Commission's Illegal Markets team has been busy: since April 2024 it issued 3,140 cease and desist and disruption notices, referred 447,778 Bing and Google URLs, and secured 287,961 URL removals. Across 160 illegal sites where traffic data existed, engagement fell by an average of 32 per cent after disruption, and the Commission's own reading of the numbers is that registrar blocks and website suspensions do far more damage than search-engine removals — 91 per cent each, against 30 per cent for a Google removal.
The most recent quarters show the same shape, larger. In July to September 2026 the Commission referred 1,835 websites to search engines — 7,677,211 URLs — and issued 546 cease and desist notices. Prosecutions are another matter: across April 2025 to March 2026 every quarter recorded 0 or 1 prosecutions commenced, one in total. Enforcement here is mostly attrition, not courtrooms.
On the legal basis, the position is unusually clear for a field this murky. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, and it is immaterial whether the facilities are provided wholly or partly by remote communication, or inside or outside the UK. On summary conviction the offence carries up to 51 weeks' imprisonment, a fine at level 5, or both. The Commission states plainly that it is illegal to offer commercial gambling services to consumers in Great Britain without a Commission licence, including where the operator holds a licence elsewhere. Note who the offence attaches to: the operator. It is not the adult customer who commits it.
One in Fifty Players, and a Warning About Chasing Them
Here is where the trade's numbers stop agreeing with each other, and it is worth showing rather than smoothing over.
The Commission's own analysis, published 5 November 2026 on data covering April 2025 to April 2026, estimated that among respondents who had gambled online in the past four weeks, 2.5 per cent had engaged with illegal gambling websites, with a further 1.5 per cent doing so in the past 12 months. That is roughly one in forty online gamblers, recently. Its illegal gambling dashboard recorded 586 illegal websites accessible to GB consumers in September 2026.
Now the industry's figures. Market-intelligence firm H2 Gambling Capital estimates the amount staked with illegal operators in the UK reached £16.6 billion in 2025, up from about £5 billion in 2019, with the legal share of gambling falling from 97 per cent to 92 per cent. A study by Frontier Economics for the Betting and Gaming Council put black-market online staking at £2.7 billion a year — 2.1 per cent of what regulated operators took. Yield Sec, working for the Campaign for Fairer Gambling, put the unregulated share at 9 per cent of gross gaming revenue in 2025. The Commission's own methodology warns that it cannot see activity hidden by VPNs.
Which do I believe? The direction, not the decimal places. Every independent estimate agrees the unlicensed share has grown, and the spread between £2.7 billion and £16.6 billion is the spread between a trade body arguing for lighter regulation and a gambling-reform campaign arguing for heavier. When an industry funds a number, read the funder's name before the figure.
The DCMS-backed Illegal Gambling Taskforce, whose terms of reference were published on 13 May 2026, has picked three fights: payments to and from illegal operators, online advertising of illegal gambling, and cross-agency enforcement. It runs for twelve months. Payments is the right target, and the Commission calls its reporting of payment transaction data to the Visa operator scheme critical and still early-stage.
Why Payout Terms Are the Real Trap
The thing that will actually cost a player is not the licence. It is the withdrawal clause, and there is a clean way to see it. Take the two tests, in order.
The first is the payout clause. A site that limps money out in slices, or prices a withdrawal, or needs a manager to approve a request, has built a delay into a term of business. On the licensed side, LCCP condition 17.1.1 prohibits a withdrawal request from triggering a demand for information the operator could reasonably have sought earlier, and the UK's fair-terms guidance bars any maximum limit on what a customer may withdraw from their deposit balance — the Commission's example of a banned term is "You may withdraw up to £50 per day and up to £500 per week". Offshore, there is no ceiling on a cashout clause: a current offshore schedule reserves the right to limit withdrawals from bonus-generated winnings to 300 per cent of the credited bonus amount, with the excess voided.
The second test is the deposit clause: anything that makes the bonus sticky. A sticky or non-cashable bonus can be wagered but never withdrawn, and is stripped out at cashout. That model vanished from the UK precisely because it was indefensible — the guidance requires that wagering must not apply to play with the deposit balance, that deposit and bonus balances be shown separately, and that a player may withdraw the deposit balance at any time, including while a bonus is active.
The Commission has fined for less. In October 2026 an operator paid £900,000 in a regulatory settlement that included a term letting customers request only one withdrawal at a time.
So the warning signs run in one direction. A cashout cap. A waiting period measured in working days rather than hours. A "review" of every fifth or tenth withdrawal. A clause giving the site sole discretion to void winnings — the Commission's view is that "may" and "reserve the right" terms of that kind are unfair. And identity documents demanded only at the point of withdrawal, which the Commission says now accounts for over a quarter of the complaints reaching its Contact Centre. Each of those is a mechanism for a site to hold the customer's money a little longer than the customer agreed.
What an Identity Check Looks Like, First Time and Later
The single thing this market turns on is the identity check, because it is where the product's two faces show.
The first time, on a licensed British site, the check happens before gambling. Licence condition 17 has required operators to obtain and verify a customer's identity before that customer is permitted to gamble since May 2019, and the information must include name, address and date of birth. Most of the time nobody notices: companies match the details against databases such as credit reference agencies and the electoral roll, so no documents change hands. Where a document is requested, it is usually a passport, driving licence or household bill. The Commission will not give a timescale, because it depends on whether verification is electronic or manual.
Later, the trigger changes. Under the money-laundering regulations, a remote casino must identify and verify a customer once deposits or withdrawals reach €2,000, and that threshold applies both to a single transaction and to transactions that appear to be linked — including, in remote casinos, activity within a single logged-on session. Above that, and for higher-risk accounts, come source-of-funds questions and, on some accounts, source of wealth. On the licensed side, deposit-side financial checks now arrive earlier: financial vulnerability checks at £150 net deposits over 30 days since 28 February 2025, with Financial Risk Assessments to be phased in from the larger operators at £5,000 in a rolling 24 hours for over-25s.
On an unlicensed site the sameulary appears with none of the scaffolding. There is no licence condition compelling a check before play, no €2,000 rule enforced by a British regulator, and no ADR scheme a British consumer can reach for free. Some offshore jurisdictions do impose real duties — Anjouan requires fund segregation, certified random number generators, AML and age verification, and a named, approved alternative dispute resolution provider from a list that currently includes EGIS ADR, Axiom ADR, iGaming ADR and an operator. That is not nothing. It is also not the Gambling Commission, and the Commission's warning notice of 20 January 2025 said as much about the pattern: casino games from licensed suppliers turning up on unlicensed sites available to GB consumers, sites that often target people who have self-excluded and that may have inadequate social responsibility and AML controls.
Warning signs of a check performed as theatre, rather than as protection: verification requested only after a win; a document request that arrives with no explanation and no deadline; a deposit accepted for months and then queried in one lump; a selfie demanded on suspicion alone without a stated reason; and a site that cannot say which regulator licenses it or which ADR provider it has named. If the terms cannot answer those two questions in a sentence each, that is the answer.
How Self-Exclusion Actually Ends
This is the part the keyword gets wrong, and it is worth being precise because the precision is on the scheme's side.
Registering with GamStop blocks a person from gambling with all online gambling companies licensed in Great Britain. The periods on offer are 6 months, 1 year, 5 years, or 5 years with auto-renewal. Signing up takes minutes, but the block can take up to 24 hours to become effective. Once registered, the registration cannot be cancelled or deactivated during the exclusion period.
Then comes the clause almost nobody reads. The exclusion stays in place after the end of the chosen period unless the person contacts GamStop to remove it. A six-month exclusion does not lapse at six months; it continues, in place, until GamStop is told otherwise. Under the terms of use, the auto-renewal option may only be switched off during the last six months of a five-year minimum exclusion period, and auto-renewal continues for up to four further five-year periods. Where nobody deactivates, GamStop holds the data through a further automatic seven-year self-exclusion period during which operators are told the person was previously excluded. The Group's 2025 annual report devotes a section to its refusal to remove registrations before the chosen term ends.
The selection pattern is worth a look, because it says something about who is signing up. Of the periods chosen by registrants in 2025: 29 per cent took six months, 24 per cent a year, 25 per cent five years and 22 per cent auto-renewal. As of July 2026 the register held 614,738 people currently excluded, of whom more than one in two had chosen the maximum five-year term; across all age groups only one in four had self-excluded for six months. Under-25s accounted for nearly one in three of all exclusions in the first half of 2026, a 26 per cent year-on-year rise, and registrations in that half were up 16 per cent overall, with May 2026 setting a monthly record of 12,236 sign-ups.
And the reach: it stops at the licensed market. The scheme blocks access to gambling websites and apps licensed in Great Britain only and can only exclude from participating operators; it cannot prevent access to services run by organisations that do not participate. Offshore sites holding no Commission licence are not connected to it. That is not an argument against the scheme — 561,983 active exclusions at the end of 2025 is a large, working piece of public infrastructure — it is simply its boundary.
One more piece, because it is where the systems interact badly. The Commission has warned that onboarding a customer under a middle name instead of a forename can create mismatches with records held elsewhere, such as GamStop, undermining the effectiveness of the exclusion. A person's exclusion is only as strong as the accuracy of the name on the accounts they opened before it.
Five Signs an Offshore Operator Can Be Judged On
The licence, checked at the source, not on the banner
Almost every offshore site shows a seal, and a seal is the easiest thing on a page to fake. Curaçao's regulator issues a Certificate of Operation Seal only to B2C operators and only for an approved, registered player-facing domain, and clicking that seal must redirect to the regulator's own certificate page. If the seal differs in design, colour or format, the site is not authorised. If the certificate behind the seal names a different domain from the one being visited, the site is showing another operator's certificate. Check by clicking through and reading the domain named on the certificate. For Kahnawà:ke, the commission's logo certificate program lets a player generate a Certificate of Good Standing. Anjouan's certificates carry a unique licence number and a QR code linking to its public register, and its own policy says a certificate that cannot be verified there should not be relied on.
The payout clause, timed against the two-day benchmark
Find the withdrawal section of the terms before depositing, and read it as a schedule rather than a promise. Look for a stated processing window, a per-transaction or per-day ceiling, a fee, and any manual-review trigger. Then hold it against 96.3 per cent clearing automatically within the benchmark period in the licensed market. A site that states its window plainly is more trustworthy than one that leaves it to a case-by-case review, even when the stated window is slower.
The bonus maths, multiplied out
Take the headline number and multiply. A 100 per cent match bonus up to £200 on a 40× wagering requirement attached to bonus funds alone means £8,000 of play before a penny of it is withdrawable. Add the contribution chart, which on one published offshore schedule credits slots and specialty games at 100 per cent, table games at 20 per cent, video poker and blackjack at 10 per cent, roulette and baccarat at 5 per cent, and craps, live dealer and jackpot games at 0 per cent. That chart is the real coefficient, and 0 per cent means the game does not count at all. Also read the maximum bet while wagering: one schedule caps a single bet during wagering at €5, another at 20 per cent of the deposited amount, with forfeiture of the bonus and winnings as the stated penalty. And check for a maximum cashout clause — a current schedule reserves the right to cap withdrawals from bonus-generated winnings at 300 per cent of the bonus credited, voiding the excess.
Fund segregation, and whether it is actually segregated
A regulator's rule that player funds be kept apart from operating funds is a good rule, and it is a rule, not a fact about the operator. Ask what the site's terms say about where the money sits, and what happens if the business fails. On the licensed side the customer-funds regime requires an operator to pick one of three insolvency ratings — not protected, medium protection, high protection — to state which applies in its terms, and, if it is "not protected", to remind the customer every six months that their funds are not protected if the business becomes insolvent, stating the value held. A site with no equivalent disclosure is telling you something by its silence.
The dispute route, named and reachable
The Commission requires licensed operators to offer a free route to an approved alternative dispute resolution provider if a complaint is unresolved after eight weeks. Offshore, the question is whether a named ADR provider exists at all. Anjouan requires its licensees to designate an approved provider and publish its name and contact details in player-facing terms, with 30 days to resolve internally before escalation; its approved list runs to EGIS ADR, Axiom ADR, iGaming ADR and an operator. Find the name, check it is a real body with a real procedure, and note that the Commission itself is a regulator rather than an ombudsman: it cannot resolve individual complaints or get anybody's money back.
A Method for Checking a Site Before Depositing
- Open the public register of the regulator named, and match the domain. The Commission's own advice is to check that the business holds a British licence and to click through to the public register to see whether the site's activities and domain names match. If the licence is offshore, do the same on that regulator's register. Reason: the seal is the claim, the register is the evidence.
- Read the withdrawal section and the bonus terms in full, before any deposit. Reason: these are the only two documents that decide what leaves the account. Terms written to be discovered after a win are the ones worth reading first.
- Work out the wagering requirement as a cash figure, and the cashout cap if there is one. Reason: "40×" hides its size, and a cap turns a large win into a fixed payment.
- Check what self-exclusion means for this site specifically. On a licensed site, participation in the national scheme is a licence condition, and an account holder who enters self-exclusion must have the account closed and any funds returned — it is not enough to block withdrawals while still taking wagers. Offshore, the scheme does not reach. Reason: knowing which of the two you are dealing with changes whether the exclusion is enforceable at all.
- Set the limits and the funding rail before the first deposit, not after. Financial limits are prompted before a first deposit on licensed sites since 31 October 2025, and a bank gambling block is applied at card level, so it must be switched on for each card. Reason: a limit set in advance is the only one that will not be argued with at midnight.
- If a payout stalls, escalate on paper and on the clock. Complain to the operator, then to the named ADR provider, and keep the dates. Reason: the licensed route allows referral to ADR after eight weeks, eCOGRA publishes an average resolution time of around a month for domestic disputes and IBAS reports 100 per cent operator compliance with decisions in the consumer's favour — and none of that machinery exists offshore.
What the Numbers Say About Why People Reach for the Wrong Site
There is one more set of figures that belongs here, because it is the honest counterweight to everything above. The third annual Gambling Survey for Great Britain, published 16 July 2026 on 20,775 adults with fieldwork from January 2025 to January 2026, found 2.4 per cent scoring 8 or more on the Problem Gambling Severity Index — stable across all three years of the survey. A further 3.5 per cent scored 3 to 7 and 7.8 per cent scored 1 to 2. Of adults who had gambled in the past 12 months, 3.4 per cent had sought support for their own gambling.
The help, if it is needed, is free and does not require a British licence to access. The National Gambling Helpline, run by GamCare, is on 0808 8020 133, 24 hours a day, every day — callers in Wales are also given 0808 2819 265. NHS England has opened 15 specialist gambling clinics since 2019 and commissions eight regional services through integrated care boards; Gamblers Anonymous England, Wales and Ulster runs around 250 meeting locations and can be reached on 0330 094 0322; GamFam supports families through its five-stage peer programme; Citizens Advice Scotland runs a gambling support service advice line on 0800 328 1131 on weekdays.
The funding behind much of that treatment now comes from the statutory levy introduced by the Gambling Levy Regulations 2025, which commenced on 6 April 2025 and charged online operators and software licences 1.1 per cent of previous-year gross gambling yield. In its first year it raised just under £120 million, ringfenced solely for research, prevention and treatment, and split 50 per cent treatment, 30 per cent prevention and 20 per cent research. An unlicensed site pays none of it. That is the sharpest single line in the whole comparison: the offshore operator takes British customers and contributes nothing to the system that treats the harm.
The Point of All This
The reason this keyword exists is that a self-exclusion feels like a wall, and a wall invites a search for the gate. The gate is real, in the narrow sense that offshore sites do not participate in the scheme and cannot be made to. What the search hides is that the gate leads somewhere without a regulator, without a payout benchmark, without a free dispute route, and without the £120 million a year that pays for treatment — which is a strange place to go looking for a shortcut. A GamStop term does not end when the calendar says so; it ends when the person contacts GamStop to remove it, and not before, and that is the whole design.
The scheme's own figures settle the rest. Of the periods chosen by registrants in 2025, 22 per cent picked auto-renewal, and more than one in two people on the register in July 2026 chose the maximum five years. People are not treating self-exclusion as a pause. They are treating it as the thing that holds.