Guardian Investigation Uncovers Vast Unlicensed Casino Network Targeting Excluded UK Players

A detailed Guardian investigation, published on April 1, 2026, laid bare a sprawling network of at least eight unlicensed online casinos operating without UK authorization, drawing in millions of British visitors who had previously self-excluded from regulated sites; platforms like MyStake, Velobet, and Goldenbet sat at the heart of this operation, run by Santeda International N.V. from Curaçao and tied through complex ownership chains to Georgian businessmen via the Swiss-registered Upgaming AG.

What's interesting here is how these sites raked in 2.3 million unique UK visitors each month from November 2025 through January 2026, according to traffic data analyzed by the journalists; they did so by zeroing in on players registered with GamStop—the UK's national self-exclusion scheme—through a web of affiliates who promoted the casinos on social media, forums, and review sites, promising unrestricted access to slots, tables, and bets without the barriers of regulated platforms.

And while Curaçao's gaming authorities oversee many international operators, Curacao eGaming regulations failed to prevent this network from flouting UK-specific rules, as experts who've tracked offshore licensing note that such setups often prioritize lax oversight over player protections.

Turns out the network masked its true controllers with AI-generated executives, including a fabricated CEO named Andres Markou whose glossy headshots and bios appeared across the sites; researchers who reverse-engineered the images confirmed they stemmed from AI tools, a tactic that lent an air of legitimacy while hiding the real power brokers behind Upgaming AG and Santeda.

Affiliates played a pivotal role, receiving commissions for directing traffic—often from desperate self-excluded users searching for loopholes; one case highlighted in the report involved promoters blasting ads on Telegram channels and Reddit threads, urging punters to "escape GamStop" with bonuses up to £5,000, while the sites themselves offered seamless deposits via crypto, e-wallets, and cards, bypassing traditional checks.

But here's the thing: these casinos mirrored licensed ones in look and feel—stocked with slots from providers like Pragmatic Play, live dealers from Evolution knockoffs, and sportsbooks covering Premier League matches—yet operated in a regulatory blind spot, pulling in deposits without age verification or responsible gambling tools mandated in the UK.

Profits didn't stay digital; they funneled into real-world projects like Georgia's Autograph Mall in Tbilisi, a luxury shopping complex linked to the Georgian businessmen at the network's helm, as company filings and property records revealed; observers who've followed the money trail point out how such investments—complete with high-end retail and entertainment—relied on revenues from UK players, estimated in the tens of millions based on visitor volumes and average bets.

Upgaming AG, the Swiss entity connecting Curaçao operations to Georgian interests, managed the tech backbone—providing white-label platforms that these casinos customized with their branding; data from similar setups, per industry trackers, shows average revenue per user hitting £200 monthly among high-risk groups like self-excluded individuals, who often chase losses without limits.

Damage reports piled up alongside the traffic stats; users recounted unauthorized charges, frozen withdrawals, and rigged games in complaints aggregated by the Guardian from forums like Casinomeister and AskGamblers, where one player detailed losing £50,000 over weeks on Velobet before account locks kicked in.

More alarmingly, a January 2026 coroner's inquest linked unlicensed sites directly to a suicide, with the deceased—a 35-year-old from Manchester—having self-excluded via GamStop but turning to these offshore operators; evidence from browser history and bank statements showed heavy activity on MyStake in the months prior, underscoring how such networks exploit vulnerabilities in self-exclusion systems.

Studies from organizations like the European Gaming and Betting Association echo this pattern, revealing that unlicensed sites account for up to 20% of problem gambling incidents in Europe, often because they lack tools like deposit caps or reality checks; those who've analyzed UK data note self-excluded users face 15 times higher risks when accessing black-market platforms.

Labour MP Alex Ballinger, representing North West Leicestershire, responded swiftly to the April 1 revelations, demanding immediate action to shutter these sites and protect vulnerable gamblers; in a statement to Parliament, he highlighted how the network preyed on those seeking help, calling it a "clear and present danger" that evaded existing safeguards.

Now, as discussions heat up in Westminster corridors during early April 2026, campaigners point to precedents like the 2024 clampdown on non-GB licensed ads, yet this case exposes gaps in enforcement against offshore affiliates; people familiar with the beat know that while IP blocks and payment disruptions have curbed some operators, tech-savvy networks adapt quickly with VPN-friendly domains and crypto rails.

One researcher who dissected affiliate payouts found commissions structured to reward volume over player health—up to 50% revenue share—fueling a cycle where promoters ignore red flags, and sites like Goldenbet boasted "no verification" as a selling point.

So what makes this network stand out amid the usual suspects? Scale, for one—2.3 million UK uniques dwarf many licensed operators, per SimilarWeb metrics cited in the probe; and the Georgian-Curaçao-Swiss nexus reflects a growing trend, as those tracking global flows report Eastern European capital increasingly dominating iGaming whitespaces.

Take the Autograph Mall: opened in 2025 with fanfare, its backers now face scrutiny over funding sources, although Georgian authorities have yet to comment; meanwhile, Curaçao's pivot to stricter sub-licensing post-2023 scandals hasn't stemmed the tide, with over 450 active domains still active under loose umbrellas.

Experts who've mapped self-exclusion bypasses often discover affiliates using SEO tricks—like keyword-stuffed blogs ranking for "GamStop alternatives"—to siphon traffic; in this instance, the Guardian's web crawls uncovered 200+ such sites promoting the octet of casinos, amplifying reach exponentially.

The Guardian's April 2026 investigation into Santeda International's network paints a stark picture of how unlicensed casinos like MyStake, Velobet, and Goldenbet exploit UK self-excluded players through affiliates, AI deceptions, and profit pipelines to Georgia; with 2.3 million monthly visitors, fraud complaints, and a linked suicide inquest, the story underscores enforcement challenges in a borderless digital landscape.

Labour MP Alex Ballinger's call for swift shutdowns resonates as stakeholders watch for responses, while data indicates such operations thrive where protections lag; observers note that until affiliate cracks and offshore pressures align, vulnerable punters remain in the crosshairs, making this exposé a pivotal moment for accountability.

Yet patterns persist—networks evolve, traffic shifts, and the chase continues; those following the industry know the ball's now in regulators' courts across jurisdictions, with UK eyes fixed on outcomes by summer 2026.