Exposed: Unlicensed Casino Web Targets UK Punters, Dodging GamStop Self-Exclusion

Investigators from The Guardian and Investigate Europe have pulled back the curtain on a sprawling operation involving at least eight unlicensed online casinos, platforms such as MyStake, Velobet, and Goldenbet that zero in on vulnerable UK gamblers, including those who've signed up for the GamStop self-exclusion scheme; this network, which funneled an average of 2.3 million unique monthly visitors from the UK between November 2025 and January 2026, connects to the opaque Curaçao-registered Santeda International and ties into Georgian businessmen through Upgaming AG, a Swiss firm that abruptly cut its links earlier this year.

What's interesting here surfaces in the meticulous digging by these journalists, who traced payments and domain registrations back to Santeda International, a company shrouded in Curaçao's lax licensing regime that allows operations without the stringent oversight UK players expect from homegrown sites; turns out, Upgaming AG once powered the tech backbone for several of these casinos, providing white-label solutions until it distanced itself amid rising scrutiny, leaving the sites to pivot quickly while still drawing massive UK traffic.

And while Curaçao eGaming licenses pop up loosely on some landing pages, experts who've pored over the documents note that these platforms flout UK Gambling Commission rules by accepting bets from British punters without proper authorization, a move that bypasses GamStop's central block on licensed operators and exposes self-excluded individuals to relentless marketing via emails, pop-ups, and affiliate promotions tailored just for them.

Take MyStake for instance: observers tracking its activity found the site bombarding UK users with bonuses pitched directly to those on self-exclusion lists, offers that dangle free spins and deposit matches while ignoring the very barriers meant to protect problem gamblers; Velobet follows suit, ramping up sports betting ads during Premier League matches, and Goldenbet layers on high-stakes slots with progressive jackpots that keep players hooked far longer than safer alternatives.

Data from web traffic analytics reveals the scale, with those 2.3 million monthly UK uniques across the eight sites translating to billions in potential wagers, figures that dwarf many licensed competitors and highlight how these operators skirt restrictions through mirror domains, VPN-friendly access, and crypto payment gateways that dodge traditional bank blocks.

But here's the thing: as UK regulators ramp up enforcement, these casinos deploy rapid domain shifts—swapping .com for .net or .io variants overnight—and embed themselves in affiliate networks that pay out commissions to UK influencers, a strategy that keeps the player pipeline flowing even when one URL gets blacklisted.

Researchers piecing together corporate filings uncovered Georgian nationals at the helm of key entities under Santeda, businessmen who've built similar networks across Europe but found the UK market particularly lucrative due to its high disposable income on betting; Upgaming AG's exit, announced quietly in early 2026, came after queries from Investigate Europe, yet the casinos persist with rebranded software that mimics the old setup, complete with live dealer tables and crash games that thrive on impulsive play.

The human cost hits hard, as evidenced by at least one tragic case: a 36-year-old man took his own life in January 2026 after spiraling losses on these platforms, a story that campaigners link directly to the sites' refusal to honor GamStop and their aggressive retention tactics like cashback lures during losing streaks; financial harm ripples wider, with reports of fraud spiking as players deposit via untraceable methods only to face withdrawal hurdles, delays that stretch weeks while accounts mysteriously get restricted.

People who've escaped these traps often describe a pattern—easy wins at first to build deposits, then escalating limits on payouts coupled with VIP schemes that encourage borrowing just to chase losses; studies cited in the probe show self-excluded gamblers facing 24/7 access, a vulnerability that licensed sites eliminate but these offshore operators exploit ruthlessly.

Yet the numbers tell an even starker tale: those 2.3 million visitors didn't stumble in by accident, since targeted ads on social media and search engines funnel them straight to bonus codes, a funnel that converts browsers into high-rollers faster than regulated paths allow.

UK MPs, reacting swiftly to the April 2026 exposé, have sounded alarms in Westminster, calling for the Gambling Commission to gain expanded powers that let it block not just domains but full IP ranges tied to illegal operators; this push builds on the 2025 Gambling Act tweaks but goes further, proposing fines for payment processors that route funds to unlicensed sites and mandatory ISP blocks akin to those used against piracy networks.

One MP highlighted the suicide case during a heated debate, arguing that current tools fall short since GamStop only covers licensed firms, leaving a gaping loophole for Curaçao upstarts; campaign groups like Gambling with Lives back the calls, pointing to data where unlicensed play correlates with 40% higher harm rates among vulnerable groups.

And now, with the investigation fresh in April 2026, the Commission has signaled reviews of its enforcement playbook, potentially rolling out pilot blocks on high-traffic offenders like those named, a move that could shrink the 2.3 million visitor pool dramatically if IPs get neutralized.

Observers who've tracked offshore incursions note this network isn't isolated—similar setups pop up quarterly, adapting to crackdowns by relocating servers or rebranding—but the Guardian probe stands out for its depth, linking payments through convoluted chains that end in Georgian bank accounts; what's significant lies in how these sites mirror licensed ones cosmetically, using UK-facing payment options like Trustly facsimiles to build false trust.

Take one affiliate marketer interviewed anonymously: they admitted earning thousands monthly by shilling Velobet links on forums, a practice that persists despite Commission warnings, since payouts flow via crypto with little traceability; the reality is, until domain blocking expands, these operators hold the upper hand, pivoting faster than regulators can list them.

So as MPs press for action, affected families and harm reduction experts watch closely, knowing that tougher IP blocks could finally stem the tide, although savvy operators might counter with decentralized hosting; either way, the exposé has shifted the conversation, forcing a reckoning on self-exclusion's limits in an era where borders mean little online.

This network's exposure by The Guardian and Investigate Europe underscores vulnerabilities in the UK's gambling safeguards, where unlicensed sites like MyStake, Velobet, and Goldenbet rack up millions of UK visits monthly, sidestep GamStop entirely, and fuel harm from fraud to fatalities; with MPs demanding IP-level blocks and the Gambling Commission eyeing reforms amid April 2026's urgency, the battle lines sharpen between offshore operators backed by Curaçao entities and Santeda-linked Georgians on one side, and a push for airtight protections on the other. Figures like the 2.3 million uniques paint a clear picture of the stakes, signaling that without swift domain and IP enforcement, the influx of vulnerable punters will continue unchecked.