UKGC Enforcement Against Offshore Casinos: URL Removals, Budgets, and Results

I attended a gambling industry compliance conference in late 2025 where a UKGC representative presented a slide showing 447,778 URLs submitted for removal from search engine results. The number filled the screen in oversized type, and there was a pause in the room — the kind of pause that happens when a figure lands harder than expected. Nearly half a million URLs. That is the scale of the Gambling Commission’s effort to disrupt access to unlicensed gambling sites targeting UK consumers. The follow-up figure was equally telling: 287,961 of those URLs had actually been removed. The gap between submission and removal tells a story about both the ambition and the limitations of enforcement in a borderless digital market.
The URL Removal Programme: Scale and Success Rate
The Commission’s URL removal programme operates through partnerships with search engines, primarily Google. The mechanism is straightforward: the UKGC identifies web pages that offer unlicensed gambling services to UK consumers, submits removal requests, and the search engines process those requests against their own policies. When a URL is successfully removed, it disappears from search results for UK-based queries. The underlying website remains live — the UKGC cannot shut down a server located in Curacao or Cyprus — but the pathway that most consumers would use to find it gets severed.

Andrew Rhodes, the Commission’s chief executive, has framed the scale of the challenge in direct terms, describing illegal online gambling as a “serious threat to consumers and to the integrity of the regulated market.” That language matters because it signals the Commission’s view of offshore operators not as a niche problem but as a systemic risk to the regulated sector. The 447,778 URLs submitted for removal represent the Commission’s primary tool for acting on that view.
The success rate — roughly 64% of submitted URLs resulting in actual removal — deserves scrutiny. On one hand, removing nearly 288,000 URLs is a substantial operational achievement. The Commission has built an infrastructure for identifying, cataloguing, and reporting unlicensed content at scale. On the other hand, a 36% failure rate means more than 159,000 submitted URLs remained accessible. Some failures reflect search engine policy nuances — Google does not automatically remove every URL the UKGC flags. Others reflect the speed at which operators create new domains, mirror sites, and redirects. An operator whose primary domain is removed today can be back under a new URL tomorrow, and the Commission must start the removal process from scratch.

The whack-a-mole metaphor gets used so often in enforcement discussions that it has become a cliche, but it remains accurate. I have tracked individual offshore operators through four or five domain changes within a single year, each time appearing in search results within weeks of the previous domain being removed. The operational cost of this cycle falls disproportionately on the regulator, not the operator. Creating a new domain costs a few pounds. Identifying, verifying, and submitting it for removal costs staff time, compliance resources, and inter-agency coordination.
£26 Million Investment: Where the Money Goes
The Gambling Commission announced an additional £26 million investment in its enforcement capabilities, accompanied by 741 cease-and-desist notices sent to operators and affiliates involved in unlicensed gambling activity targeting UK consumers. That budget figure represents a meaningful escalation from previous years and reflects the political pressure the Commission faces to demonstrate that it is taking the black market problem seriously.

The investment covers several operational strands. A significant portion funds the technology and staffing behind the URL removal programme — the analysts who identify unlicensed sites, the systems that track domain changes, and the legal resources required to engage with search engines and hosting providers. Another portion supports the cease-and-desist function, which targets not just casino operators but the affiliates, advertising networks, and payment processors that form the supply chain around unlicensed gambling.
The 741 cease-and-desist notices are worth examining. A cease-and-desist is a formal demand that an entity stop an identified activity — in this case, offering or promoting unlicensed gambling to UK consumers. It is not a fine, a prosecution, or a court order. It carries moral and reputational weight but limited direct legal force, especially when directed at entities operating outside UK jurisdiction. An operator based in Curacao who receives a cease-and-desist from the UKGC can comply, or they can ignore it. The Commission’s ability to escalate beyond the notice depends on cooperation from the operator’s licensing authority, payment processors, and the jurisdictions where the operator’s servers and bank accounts are located.
I have spoken with compliance officers at several offshore operators who described UKGC cease-and-desist letters as “inbox noise.” That characterisation is not universal — some operators do take them seriously, particularly those with aspirations to eventually seek licences in regulated markets. But for operators with no interest in UK licensing and no assets within UK jurisdictional reach, the practical impact of a cease-and-desist is limited to the inconvenience of reading it.

Why Enforcement Alone Cannot Solve the Offshore Problem
I have been covering UKGC enforcement for most of my career, and my conclusion has not changed in five years: enforcement is necessary but structurally insufficient. The Commission is fighting a supply-side battle in a market where demand is the driving force. As long as UK players want to access offshore casinos — whether for higher stake limits, fewer affordability checks, or access during a GamStop self-exclusion period — there will be operators willing to serve them. The economics are too attractive for supply to dry up in response to enforcement alone.

The jurisdictional mismatch is fundamental. The UKGC has authority over entities that hold or seek UK gambling licences. It has no authority over a company incorporated in Curacao, operating servers in Cyprus, and processing payments through an Estonian e-money institution. It can make that company harder to find through search engine removals. It can make its payment processing more difficult through cooperation with card networks and banking regulators. It can name and shame through public enforcement updates. But it cannot shut the company down, seize its assets, or prosecute its directors. Those actions require cooperation from foreign authorities, and such cooperation is inconsistent at best.
The demand-side factors are equally important. Every regulatory measure that makes UKGC-licensed gambling more restrictive — higher tax rates, lower stake limits, more intrusive affordability checks — increases the incentive for players to look offshore. The Commission operates in a policy environment where it is simultaneously expected to reduce gambling harm and prevent migration to a market with no harm-reduction measures at all. Those two objectives are not always compatible, and enforcement sits uncomfortably at the intersection.
None of this means the enforcement effort is wasted. URL removals measurably reduce casual access to unlicensed sites. Cease-and-desist notices create a paper trail that supports future legal action. The £26 million investment signals political will. But enforcement is a containment strategy, not a solution. The offshore market will continue to exist as long as the conditions that drive demand persist, and no amount of URL removals will change that underlying dynamic.
Written by the editors at StakeVault.