Investigative Report Exposes Vast Illegal Network of Unlicensed Online Casinos Targeting UK Gamblers

An investigative report published in early April 2026 has pulled back the curtain on a sprawling network of unlicensed online casinos preying on UK gamblers, operations run by companies like Santeda International and Upgaming from bases in Curaçao and Georgia; these sites, including MyStake, Velobet, and Goldenbet, dodge UK regulations while luring players with popular slot games such as Rise of Merlin and Golden Piggy Farm. Researchers behind the probe, detailed in The Guardian, highlight how this network evades self-exclusion tools like GamStop, drawing in vulnerable individuals who seek to limit their gambling. What's notable here is the scale: average monthly UK visitors hit 2.3 million from November 2025 through January 2026, figures that underscore the challenge for regulators.

Experts tracking online gambling trends note that these platforms operate in a legal gray zone, licensed in jurisdictions with lax oversight, yet they tailor promotions and interfaces specifically for British players; take one case where a site mimics the look of legitimate UK operators, complete with familiar payment methods and English-language support, making it tough for newcomers to spot the red flags. And while UK law demands strict licensing through the Gambling Commission, these offshore entities slip through by hosting servers far from British soil, a tactic that's become all too common in the digital age.

Santeda International emerges as a key player in this network, managing multiple brands from Curaçao, a Caribbean island notorious for its permissive gambling licenses; Upgaming, based in Georgia, handles the tech backbone, providing white-label solutions that power sites like Velobet and Goldenbet, allowing rapid scaling without heavy investment. Observers point out that Curaçao's one-time fee structure for licenses—often under €20,000—contrasts sharply with the UK's rigorous annual audits and player protection mandates, which is why these operators flock there.

But here's the thing: connections between these companies run deeper than geography; shared payment processors, identical slot portfolios, and overlapping marketing affiliates reveal a coordinated effort, one that funnels traffic from UK-focused ad campaigns straight to unlicensed doors. Data from web traffic analysis corroborates this, showing spikes in UK referrals during peak advertising periods, while blockchain trackers expose crypto wallet links tying deposits across sites.

Those who've dissected the corporate trails describe a web of shell companies, with Santeda listing addresses in Cyprus alongside Curaçao, and Upgaming partnering with Eastern European developers to customize slots for UK tastes; it's not rocket science, but piecing it together took months of domain registrations, WHOIS lookups, and forum scraping.

Rise of Merlin, with its mystical reels and free spin features, alongside Golden Piggy Farm's farmyard bonuses and multipliers, anchor the lures on these platforms; developers like Play'n GO and others supply the content, unaware or unconcerned about end-user licensing in some instances, drawing players who chase high RTP rates often advertised at 96% or above. Players often find themselves hooked by demo modes that seamlessly transition to real-money play, a design choice that bypasses initial warnings.

Turns out, these games mirror those on licensed UK sites, creating a false sense of security; one study of player complaints reveals repeated mentions of "familiar slots but faster payouts," which keeps the spins coming even as losses mount. And since these casinos skip affordability checks—no mandatory ID verification or spending caps—vulnerable users, including those on GamStop, slip right in using VPNs or basic workarounds.

From November 2025 to January 2026, UK visitors averaged 2.3 million monthly across the network, a figure that rivals some licensed giants; peak days saw over 100,000 unique sessions, with slots accounting for 70% of playtime according to session logs analyzed in the report. Researchers discovered that mobile traffic dominated at 65%, reflecting how apps and responsive sites make access effortless on the go.

What's significant is the retention: average session lengths stretched to 45 minutes, double the industry norm for unlicensed sites, thanks to loyalty programs mimicking UK standards—cashback offers, VIP tiers, even "responsible gambling" badges that ring hollow without enforcement. Yet beneath the polish, deposit volumes tell a darker story; extrapolated data suggests £50 million in UK-sourced wagers monthly, much from repeat visitors who'd self-excluded elsewhere.

Significant losses pile up for those ensnared, with case studies in the report detailing one UK player down £15,000 over three months on MyStake, another losing £8,500 chasing Goldenbet jackpots despite GamStop registration; these aren't isolated tales, as forums buzz with similar accounts, painting a picture of addiction fueled by unchecked access. Evidence suggests that 40% of sampled losers showed prior self-exclusion flags, a vulnerability these sites exploit ruthlessly.

People who've escaped recount how bonus wagering requirements—often 40x or higher—trap funds, turning small deposits into locked pots; it's where the rubber meets the road for problem gamblers, who bypass barriers only to face steeper odds offshore. Regulators now face pressure, as these losses strain support services like GamCare, already overwhelmed in early 2026.

GamStop, the UK's self-exclusion database, proves powerless against offshore operators who simply ignore it; players register there to block licensed sites, but a quick domain switch or mirror site on these networks brings them back in, often within hours. Experts observe that payment mirroring—offering Trustly, MuchBetter alongside crypto—lowers barriers, while geo-blocking stays lax, letting UK IPs roam free.

So while the Gambling Commission blacklists domains, new ones pop up weekly under Santeda and Upgaming umbrellas; enforcement relies on ISPs and banks, measures that lag behind the tech-savvy operators. This cat-and-mouse game, ongoing since 2019 self-exclusion rollout, exposes cracks widened by post-Brexit licensing shifts.

In April 2026, as the report circulates, voices from MPs, charities, and even licensed operators amplify demands for action; proposals include mandatory payment blocking for unlicensed sites, expanded Gambling Commission powers to target affiliates, and international pacts with Curaçao authorities—who've pledged reviews but delivered little historically. Observers note that France and Germany's IP bans offer models, potentially slashing traffic by 80% if adopted.

Take the Betting and Gaming Council, pushing for "unified whitelist" systems where only approved domains flow funds; meanwhile, GamStop enhancements like multi-jurisdiction sharing gain traction, although implementation could stretch into 2027. The writing's on the wall: without escalation, networks like this will balloon, especially as economic pressures drive more to slots.

This April 2026 exposé lays bare a network that's not just evading rules but thriving on them, with 2.3 million monthly UK visitors underscoring the urgency; Santeda, Upgaming, MyStake, Velobet, and Goldenbet—powered by slots like Rise of Merlin and Golden Piggy Farm—highlight systemic flaws in cross-border enforcement, from Curaçao laxity to GamStop limitations. Data indicates financial devastation for players, fueling consensus for reforms like payment blocks and global cooperation; until authorities act decisively, the influx continues, a stark reminder of digital gambling's wild frontiers.