Unlicensed Casino Web Targets UK Gamblers, Bypassing Self-Exclusion Shields in a Multi-Million Visitor Surge

A joint probe by The Guardian and Investigate Europe has exposed a sprawling operation of at least eight unlicensed online casinos, including prominent names like MyStake, Velobet, and Goldenbet, all run by Santeda International out of Curaçao; these platforms previously drew support from Upgaming AG, a firm tied to Georgian businessmen, and they zeroed in on UK players, even those enrolled in the GamStop self-exclusion program designed to block access to licensed sites.

Figures reveal these sites drew a staggering 2.3 million UK visitors each month from late 2025 through early 2026, pulling in crowds despite lacking UK licenses and flouting basic safeguards, while operators dodged blocks through clever tech maneuvers and aggressive marketing that preyed on vulnerabilities.

What's interesting here is how the network operated seamlessly across borders, with Curaçao serving as the hub—a jurisdiction known for lighter oversight—allowing Santeda to keep the wheels turning even as UK authorities scrambled to catch up.

Santeda International, the Curaçao-based entity at the helm, managed this fleet of casinos without a nod from UK regulators, yet servers and payment flows funneled money back and forth with ease; earlier backing came from Upgaming AG, linked to Georgian entrepreneurs who built software platforms tailored for high-volume online betting, enabling sites like MyStake to offer slots, tables, and live dealers in a slick package that mimicked legit operations.

Investigators traced ownership threads showing Georgian businessmen pulling strings behind Upgaming, which supplied the tech backbone before Santeda took full control, and this shift didn't slow the momentum—in fact, it ramped up targeting of UK users who had self-excluded via GamStop, a scheme meant to protect problem gamblers by blacklisting them from participating sites.

But here's the thing: these casinos ignored GamStop entirely, welcoming excluded players with open arms and bonuses that hooked them right back in, while Curaçao's lax rules let the operation thrive unchecked for months on end.

Data from the investigation shows those 2.3 million monthly UK visits piled up consistently from October 2025 into February 2026, with traffic peaking around holidays when vulnerabilities often spike; operators evaded IP blocks by cycling through mirror domains, VPN-friendly setups, and affiliate networks that blasted ads across social media, search engines, and even football forums popular in the UK.

Take Velobet, for instance, which flooded punter communities with offers tailored to sports bettors sidelined by self-exclusion, while Goldenbet pushed high-stakes slots with promises of quick wins that data indicates led to rapid losses for many; MyStake, meanwhile, leaned on live dealer games streamed from Eastern European studios, creating an illusion of legitimacy that drew in excluded players seeking that familiar rush.

And yet, despite GamStop's multi-site coverage—now spanning hundreds of operators—these unlicensed outfits slipped through cracks by operating outside the UK's licensed ecosystem altogether, a loophole that's frustrated campaigners for years.

Reports detail significant financial harm rippling through affected families, with losses mounting into the tens of thousands per player in some tracked cases, as easy deposits via cards, e-wallets, and crypto pulled money from UK accounts faster than blocks could activate; one tragic outcome surfaced in January 2026, when a suicide linked directly to losses on these platforms underscored the stakes, prompting coroners to flag unlicensed sites in their findings.

Observers note how such networks exploit isolation, bombarding self-excluded individuals with emails and pop-ups that bypass filters, and while exact figures on total losses remain elusive due to the offshore nature, visitor data suggests billions in wagers processed over those key months, much of it from UK sources chasing recovery bets that only dug deeper holes.

It's noteworthy that this isn't isolated—similar probes by Curaçao's gaming oversight bodies have spotlighted licensing gaps before, yet enforcement lags, leaving players exposed as operators pivot to new domains overnight.

UK MPs, led by figures like Alex Ballinger, have ramped up pressure in April 2026 for stronger measures against such networks, demanding faster block implementations, better international cooperation, and penalties that hit facilitators like payment processors; Ballinger highlighted in parliamentary debates how these sites not only ignore GamStop but actively market around it, turning a protective tool into a sieve.

Calls echo for tech upgrades like AI-driven detection to spot mirror sites early, alongside sanctions on affiliates who profit from referrals, and while Curaçao promises tighter sub-licensing reviews, progress crawls, allowing Santeda-like entities to regroup under fresh brands.

So now, with the Guardian's exposé dropping mid-April 2026, momentum builds for cross-border task forces, drawing parallels to EU efforts where bodies like the Malta Gaming Authority—though not directly involved—have shared intel on rogue operators slipping into markets like the UK.

Those who've tracked this space point to a familiar playbook: Curaçao firms like Santeda leverage cheap licensing fees and minimal audits to launch clones rapidly, while Georgian tech providers like Upgaming supply white-label solutions that plug-and-play for any jurisdiction skimping on rules; UK traffic data underscores the pull, with mobile access driving over 60% of those 2.3 million visits, as apps and responsive sites made gambling ubiquitous on phones.

One case researchers cited involved a GamStop user who racked up £50,000 in debts on Goldenbet within weeks, only discovering the site's unlicensed status after chasing losses across affiliates, and such stories, pieced together from forum posts and regulator tips, paint a picture of systemic evasion that's outpaced UK defenses.

Turns out, payment reversals prove tricky too, since offshore processors in Georgia and beyond prioritize operator payouts, leaving UK banks to handle disputes that often drag on unresolved.

As of early April 2026, blocks on named sites like MyStake have rolled out unevenly, with some mirrors still live and drawing traffic, while Santeda stays mum, rumored to rebrand yet again; MPs' advocacy gains traction amid public outcry post-suicide reports, pushing for laws that criminalize ad promotion of unlicensed platforms and mandate global payment freezes.

Experts who've studied offshore flows suggest international pacts—think Curaçao aligning with EU standards—could stem the tide, but until then, self-excluded players navigate a minefield where one wrong link restarts the cycle.

The Guardian and Investigate Europe's revelations lay bare a network that turned Curaçao's shadows into a UK gambling hotspot, amassing millions of visits while inflicting real damage, from drained accounts to lives upended; with 2.3 million monthly users hooked despite GamStop, and MPs like Ballinger sounding alarms, the path forward hinges on swift enforcement bridges across borders, closing evasion loopholes before the next Santeda spins up. Data from this probe serves as a stark marker, urging vigilance in an industry where tech races ahead of rules every time.