September 16, 2026
A new Fincord Intelligence report estimates the global illegal online gambling market generated around $50 billion in gross revenue in 2025, run through roughly 5,000 operator structures and more than 15,000 sites and apps. The detail that should stop British readers cold is narrower: people who have self-excluded through GAMSTOP are being actively marketed to as a customer segment — and the deposit bonuses used to reach them run to 300–500%.
Self-exclusion is the clearest signal a gambler can send. Registering with GAMSTOP is a person deciding, in a moment of clarity, that they want the door locked behind them. According to a new report from Fincord Intelligence, that decision has been turned into a targeting parameter — a searchable category of customer, marketed to under the label "Non-GamStop".
The report, publicised this week by the Betting and Gaming Council, puts the global illegal online gambling market at around $50 billion in gross revenue for 2025. But the number that matters most in Britain is not the one with nine zeros on it.
Source: Fincord Intelligence, publicised by the Betting and Gaming Council
Global scale: ~$50 billion in gross revenue from illegal online gambling in 2025
Structure: around 5,000 operator structures behind more than 15,000 websites and apps
Evasion: mirror domains, VPN access and browser-based apps that bring blocked services back quickly
The UK angle: "Non-GamStop" casinos marketed to people who have self-excluded; no identity checks, no financial checks, no betting limits
The channels: search engines, social media, affiliates, influencers, Telegram and WhatsApp
The lure: deposit bonuses of 300–500%, higher advertised returns, faster payouts
Payments: ~35% of illegal-sector payments already in cryptocurrency, projected to pass 70% by 2030
Enforcement benchmark: Interpol's SOGA X operation around Euro 2024 — networks linked to more than $5.1 billion across 28 countries
The worst possible customer list
Start with what GAMSTOP actually is. It is Britain's national online self-exclusion scheme: register once, and every operator licensed in Great Britain is required to refuse you for the period you choose. It works, and for a great many people it is the single most effective tool in the system.
Its limit is written into its design. The obligation applies to licensed operators, which means a self-exclusion stops precisely at the edge of the regulated market. An operator with no licence has nothing to lose by taking the bet — and, according to this report, a commercial reason to go looking for exactly those customers.
The report also notes that these sites offer no identity checks, no financial checks and no betting limits — and reach people through search engines, social media, affiliates, influencers, Telegram and WhatsApp. Those last two matter more than they look. A message in a private chat is not advertising anyone can audit, report or take down; it reaches one person, leaves no public trace and cannot be measured by any regulator.
Why a 500% bonus is a warning label
The competitive weapon described in the report is generosity: deposit bonuses of 300–500%, higher advertised returns and faster payouts than the regulated market generally offers.
Anyone who has read our guide to what actually makes a casino bonus worth claiming already knows the problem with the headline number. In the licensed market, a bonus is a product with enforceable terms — wagering requirements, expiry dates, game contribution rates, all of which have to be disclosed and all of which a regulator can rule on if they are applied unfairly.
Off-market, none of that machinery exists. The terms can say anything, be changed at any point, or be ignored entirely at withdrawal. A 500% bonus from an operator with no licence is not five times better than a 100% bonus from one with a licence; it is an offer with no mechanism behind it, priced to be irresistible precisely because the business making it never expects to be held to it.
Payouts in the regulated market are slowed by identity and source-of-funds checks — genuinely irritating, and genuinely the reason the money is traceable and the operator is accountable. "Faster" is accurate right up until the withdrawal that does not arrive, at which point there is no adjudicator, no regulator and no jurisdiction to appeal to.
Five thousand structures, fifteen thousand front doors
The architecture the report describes explains why enforcement has struggled. Roughly 5,000 operator structures sit behind more than 15,000 websites and apps — three front doors, on average, for every business behind them.
That ratio is the whole strategy. Mirror domains, VPN access and browser-based applications mean a blocked service can reappear almost immediately under a new address, with the same accounts, the same balances and the same customers. Blocking a domain imposes a cost measured in minutes on the operator, and a process measured in weeks on the authority doing the blocking.
Which is why the report's central recommendation is not about websites at all. It argues governments should target the supporting infrastructure — payment services, cryptocurrency intermediaries, affiliates, advertisers, software suppliers and hosting providers — on the logic that a site is cheap to replace while a functioning payment rail is not.
The payment rails are the real front line
Which brings up the number with the longest shadow in the whole report: around 35% of payments in the illegal sector are already made in cryptocurrency, a share the report projects could exceed 70% by 2030.
Payment blocking has been the most effective tool governments have against unlicensed gambling, for a simple structural reason — card networks and banks are regulated, identifiable and reachable. Squeeze them and the money stops, regardless of how many mirror domains an operator can spin up.
Cryptocurrency removes that pressure point. A transfer needs no intermediary to approve it and no institution to answer for it, which is exactly the property that makes it attractive in the first place. If the projection holds, the single lever that has worked best will be operating on a shrinking share of the market — and the choke points move to exchanges and off-ramps, the places where crypto becomes spendable money.
Interpol's number, for scale
For a sense of what enforcement at scale actually turns up, the report cites Interpol's SOGA X operation around Euro 2024, which identified networks linked to more than $5.1 billion in illicit proceeds and related transactions across 28 countries.
Two things follow from that. The first is that the money is real and the networks are genuinely transnational. The second is the more sobering one: a coordinated international operation tied to one of the biggest sporting events on the calendar accounted for roughly a tenth of the annual figure the report attributes to the sector as a whole.
The Ukraine material — and how to read it
The report also refers to assessments by Ukrainian authorities that some gambling businesses associated with the Russian Federation may contribute, directly or indirectly, to Russian economic interests, facilitate sanctions circumvention and create wider national security risks.
That passage comes with a caveat the report itself supplies, and it is worth repeating rather than dropping: these are presented as analytical assessments, not judicial findings. No court has ruled on them, and the distinction is not a technicality — it is the difference between an intelligence judgement and a proven fact.
Read within those limits, the point being made is structural rather than accusatory. The same infrastructure that lets an unlicensed casino take money from a self-excluded gambler in Britain — layered corporate structures, obliging payment intermediaries, crypto rails, disposable domains — is equally serviceable for moving value around sanctions. It is one plumbing system with several possible uses.
Who is telling you this
As with the black-market forecast attached to the St Leger's 250th anniversary earlier this week, the provenance belongs in the story rather than in a footnote. Fincord Intelligence is a commercial intelligence firm, and the report is being publicised by the trade body for Britain's licensed operators — an industry with a direct interest in the black market being understood as large, sophisticated and growing.
The headline estimate deserves the same treatment as any market-sizing exercise for an economy that by definition keeps no public accounts: the methodology is not set out, and $50 billion is a modelled figure rather than a measured one. What is not in doubt — because the sites are visible to anyone who searches for them — is the specific practice at the centre of the report. "Non-GamStop" is not an inference. It is a phrase these operators use about themselves.
What to do with this if you are a player
Three practical points, all of which cost nothing:
- Treat "Non-GamStop" as a red flag, not a feature. A site advertising that it will accept self-excluded customers is advertising that it ignores the one rule designed to protect people at risk.
- Check the licence, not the bonus. A British-licensed operator publishes its licence details in the site footer, verifiable against the regulator's public register in under a minute.
- Be suspicious of offers far outside the market norm. In a regulated market, bonus sizes cluster because the terms behind them are enforceable. An offer several times larger than everyone else's is telling you something about the rules it expects to follow.
If a self-exclusion is being tested — by an ad, a message or a search result — that is the moment the protection is doing its job, not failing at it. Free, confidential support is available in the UK through the National Gambling Helpline, and blocking software can close the gap that GAMSTOP cannot reach on its own.
Figures are estimates published by Fincord Intelligence and publicised by the Betting and Gaming Council; they have not been independently verified and the methodology is not public. The Ukraine-related material is presented in the report as analytical assessment rather than judicial finding. The image above is illustrative. Gambling involves risk and isn't for everyone — please play responsibly, set your limits, and if it stops being fun, take a break.
