Spotting an Unlicensed Casino
Every casino that takes a bet from a UK address needs a licence from the Gambling Commission. The licence forces operators to hold player money in a separate account, run games from approved suppliers and answer complaints through a formal process. Offshore sites skip all of it. They buy the same search ads, copy the layout of regulated casinos and take deposits through routes that leave you with little to fall back on when a withdrawal stalls.
Spotting the difference takes a few minutes and no technical knowledge. You'll find the clues in the footer, the address bar and the payment page.
The UKGC licence, clause by clause
Licence conditions reach further than a badge at the bottom of the page. An operator has to protect customer funds at one of three levels and tell you which level it uses, so you can see how much of your balance survives if the business fails. Games come from suppliers the Commission has approved, and the operator publishes the return-to-player figure for each one. Operators hold two licences in practice, one for remote casino games and one for betting, and the register shows which activities each one covers.
Complaints follow a set path. You raise the issue with the operator first, and if that goes nowhere you escalate to an adjudication service such as IBAS, which rules on the dispute and can order a payout. Staff train on spotting gambling harm, and the business has to act on what they flag. The Commission can fine an operator, suspend its licence or revoke it, and it publishes the reasons when it does. Offshore sites answer to nobody you can reach.
Finding the licence number
Scroll to the bottom of a regulated casino and you'll find a licence number in the form of a short account reference, with the Commission's name beside it. Operators repeat it on the terms page and in the footer of the mobile site, which matters because the brand name you play under belongs to a parent company that holds the licence. A proper footer names both. The number also appears in the account area once you sign in, which gives you a second place to compare.
Some operators run several brands on one licence, so two casinos with different names and designs can share the same account number. If the footer names a company registered outside Britain instead of a UKGC account number, that tells you which regulator would handle a complaint. It won't be the one that can fine an operator for breaking UK rules.
Three details in the footer do most of the work: the UKGC account number, the registered name of the licence holder, and a link to the Commission's public register.
Cross-checking the public register
The Commission publishes every licence it issues on a public register, searchable by trading name or account number. Copy the number from the footer, run the search, and the entry should match the brand, the domain and the company behind it. A mismatch means you're looking at a cloned page. Our walkthrough on how to check a UKGC licence covers the register field by field, including what to do when a brand trades under a name that doesn't appear in the results.
The register also lists the trading names an operator works under, so a brand you don't recognise can still belong to a licensed company. Search the company name rather than the brand if the first attempt returns nothing. A licence covers a named company, not a website, so the same operator can launch a new brand without a new application.
Clone sites copy everything but the domain
Cloned casinos cause the sharpest losses. Someone lifts the design of a licensed operator, builds a near-identical site on a throwaway domain and buys ads against the brand name. Clone operators also bid on paid search slots, so the top result for a brand name can belong to the fake. You land, you log in, and your credentials go to whoever built it.
One habit stops most of these attempts: compare the address bar against the domain you searched for. On a licensed operator the BlazeBet casino login box sits on the same domain as the homepage you arrived from, and the UKGC account number appears in plain text at the bottom of every page. When the login box sits on a domain you don't recognise, close the tab and open the site from a bookmark you saved earlier.
Deposit and withdrawal rules that follow the licence
Payment methods tell you where an operator's licence sits. UK-licensed sites take debit cards, PayPal, Apple Pay and Google Pay, open banking transfers through providers such as Trustly, and Paysafecard. Credit cards cannot fund a gambling deposit in Britain, a ban that has held since April 2020. A site that accepts a credit card is either ignoring the rule or licensed somewhere that allows it.
Withdrawals follow the method you deposited with. Licensed operators send money back to the same card or wallet, and the terms state the timescale in working days, starting from the point your identity checks finish. Offshore sites push crypto and wire transfers and set their own timelines. Some operators charge for a bank transfer withdrawal, and those fees sit in the terms alongside the timescale. Read the withdrawal terms before you send money.
Account checks, limits and self-exclusion
Licensed operators verify your name, age and address before you place a real bet, so the operator may ask for a document before it releases your first withdrawal. That check exists to stop someone opening an account in your name. In the account settings you'll find deposit limits, loss limits, session timers and a time-out tool. A limit decrease takes effect straight away; an increase waits 24 hours. Deposit limits apply per operator, so a limit you set on one site doesn't follow you to the next.
GamStop blocks you from every UK-licensed site for a period you choose, and it works across operators because they all sign up to the same scheme. GamCare runs a phone line and a live chat for anyone who wants to talk through their gambling with a trained adviser.
Bonus terms worth reading
Wagering requirements decide whether a bonus is worth taking. A £50 bonus with a 40x playthrough means £2,000 in bets before you can withdraw anything from it, and slots count at full value while table games count at a fraction. Licensed operators cap your winnings from a bonus and put an expiry date on the whole thing. Those limits belong in the terms, in plain numbers.
A site that hides the wagering figure, or quotes it only after you opt in, is giving you a reason to look elsewhere. The Commission has fined operators for misleading bonus promotions, and the published decisions make useful reading if you want to know which terms attract enforcement. Free spins come with their own rules, and winnings from them carry a separate cap.
Reporting a site that fails the test
The Commission takes reports on unlicensed operators through a form on its website, and screenshots of the sign-up page and payment page help the case. If you've already deposited, call your bank and ask them to block the merchant. Change the password on any account that shares an email address with the casino account, since clone sites harvest credentials and try them elsewhere. Then check your inbox for password reset messages you didn't request.
Reports work better with evidence. Save the sign-up page, the payment confirmation and any chat transcript before the site disappears or changes its domain.
Before your next deposit
Five checks cover most of the risk: the licence number in the footer, the domain in the address bar, the deposit methods on offer, the withdrawal timescale in the terms, and the safer gambling tools in your account settings. An operator that passes all five has answered to a UK regulator for years. None of the checks need an account, and you can run them before you hand over an email address.
Run the checks once on a site you trust, and you'll know what a licensed page looks like the next time a clone turns up in your search results.