Guardian Investigation Uncovers Unlicensed Casino Empire Targeting UK Gamblers Beyond GamStop Barriers

The Probe That Lifted the Lid

Researchers from The Guardian and Investigate Europe dug deep into a sprawling network of unlicensed online casinos, exposing operations run by Santeda International from Curaçao that preyed on UK gamblers, even those who'd self-excluded via GamStop; these sites, including MyStake, Velobet, Goldenbet, and Rolletto, linked back to Georgian businessmen through Upgaming AG, a Swiss firm handling their tech backbone.

What's interesting is how this network evaded UK oversight entirely, since Curaçao's lax licensing allowed them to operate beyond the reach of the UK Gambling Commission, yet they tailored their marketing straight at British players with aggressive ads on social media and search engines; data from November 2025 through January 2026 shows these platforms drew an average of 2.3 million unique UK visitors each month, figures that highlight the scale even as regulators scrambled to respond.

And while the sites flaunted fake credentials—AI-generated executives with polished bios and sham affiliate partnerships to mimic legitimacy—gamblers faced unlicensed risks from day one, with no consumer protections in place; observers note this setup echoed patterns seen in offshore gambling hubs, where promises of quick wins lured in vulnerable players who thought they were safe.

Slipping Past Self-Exclusion Shields

Self-excluded punters signed up through GamStop, the UK's official barrier against problem gambling, found themselves still able to deposit and play without hurdles on these Curaçao platforms, since the sites ignored the central block list entirely; take teh case of players who'd barred themselves from licensed UK operators only to stumble into MyStake or Rolletto via targeted Facebook ads or Google searches for "non-GamStop casinos," a loophole that experts have long flagged as a ticking time bomb.

But here's the thing: these operators didn't just overlook GamStop; they actively promoted it as a feature, with landing pages boasting "Play freely outside UK restrictions" and chat support reassuring users that self-exclusion wouldn't apply; according to the joint investigation, Upgaming AG provided the software muscle, enabling seamless payments through crypto and e-wallets that dodged traditional bank flags, while Georgian-linked entities managed the financial flows behind the scenes.

Turns out the network's structure layered companies across jurisdictions—Curaçao for licensing, Switzerland for tech via Upgaming, and Georgia for ownership ties—creating a web tough for enforcers to untangle; people who've tracked similar setups say this mirrors tactics used by illicit operators worldwide, where blurred lines between legal entities shield the real profiteers.

AI Facades and Affiliate Deception

The casinos leaned heavily on artificial intelligence to craft believable fronts, generating executive profiles complete with LinkedIn-style headshots and bios claiming decades in iGaming, yet reverse image searches revealed stock photos and fabricated histories; affiliates, those influencers and sites paid to drive traffic, pushed bonus offers like "200% welcome match, no GamStop needed," raking in commissions on losses without disclosing the unlicensed status.

Studies of the network's promo tactics show emails and SMS blasts hit self-excluded users directly, sometimes within hours of their GamStop signup, exploiting data brokers who sold contact lists; one affiliate network alone, tied to these sites, generated thousands of referrals monthly, with payouts funneled through opaque Georgian accounts, a detail the investigation pieced together from leaked documents and server data.

So while players chased jackpots on slots and tables, the house stacked the odds not just with algorithms but with outright deception, as payout complaints went unanswered and withdrawals stalled indefinitely; it's noteworthy that this AI-driven mirage convinced many that these were reputable outfits, much like how polished scams operate in other online spaces.

Human Toll and Financial Devastation

Financial losses mounted quickly for those ensnared, with reports of punters dropping thousands in days on high-volatility games designed to hook fast; fraud reared its head too, as some users faced unauthorized charges post-deposit or accounts mysteriously drained, prompting police reports that hit dead ends due to the offshore base.

Tragically, the fallout included at least one confirmed suicide—that of Ollie Long in January 2026, a young man whose family linked his death to spiraling debts from Velobet, where he'd bypassed his GamStop exclusion; families of other victims shared stories of homes repossessed, relationships shattered, all while the operators cashed out untouched by UK law.

Data indicates the network processed millions in UK-sourced bets over those peak months, with average session losses climbing as AI personalization pushed riskier plays; observers who've reviewed GamStop logs note a spike in failed self-exclusion attempts around the same period, underscoring how these sites undermined recovery efforts for problem gamblers.

Scale of the Intrusion

November 2025 to January 2026 marked the network's heyday in the UK market, pulling in 2.3 million unique visitors monthly across the four main brands, per traffic analytics from the probe; MyStake led with flashy sportsbooks and live dealers, Velobet chased football punters, Goldenbet targeted slots fans, and Rolletto mixed crypto bets with esports—all optimized for mobile, where most UK access happened.

Yet even as visitor numbers soared, payment processors like those handling Visa and PayPal links raised few red flags initially, allowing the flow to continue; what's significant is how search engine ads for "GamStop-free sites" funneled traffic straight to them, bypassing safer alternatives and landing vulnerable users in the crosshairs.

And with Curaçao's regulator issuing licenses for a fee without rigorous checks, the entire operation hummed along, processing bets that would've been illegal under UK rules; those studying gambling trends point out this influx strained GamStop's resources, as helplines fielded a surge in calls from players realizing too late they'd strayed offshore.

Calls for Action and Regulatory Pushback

By April 2026, MPs raised alarms in Parliament, demanding tougher laws to block payments to unlicensed sites and expand UKGC powers extraterritorially; the Commission, lacking direct jurisdiction over Curaçao, secured extra funding to ramp up enforcement against enablers like UK-based affiliates and ad networks.

Figures reveal the UKGC already pursued over 100 illicit operator blocks in 2025, but this network's size prompted a dedicated task force; meanwhile, Investigate Europe's reporting spurred payment giants to tighten scripts, freezing thousands in suspicious transactions mid-flow.

Experts anticipate upcoming legislation targeting "white-label" providers like Upgaming AG, aiming to choke the tech supply chain; that said, with Georgia's businessmen pulling strings from afar, full shutdowns could drag on, leaving punters to navigate warnings from sites like BeGambleAware in the interim.

Wrapping Up the Network's Shadow

This exposure by The Guardian and Investigate Europe casts a stark light on vulnerabilities in the UK's gambling safeguards, where offshore networks exploit gaps to target the very players protections aim to shield; with 2.3 million UK visits underscoring the reach, and tragedies like Ollie Long's suicide driving urgency, regulators now race to fortify barriers—yet the ball's in lawmakers' court to close loopholes before more fall through.

People monitoring the beat know offshore threats evolve fast, but data from this probe equips enforcers with names, links, and tactics to strike back; as April 2026 unfolds, watch for UKGC updates on frozen assets and site takedowns, signals that the fight against illicit casinos intensifies.