Guardian Probe Exposes Unlicensed Casino Network Luring 2.3 Million UK Visitors Monthly

A Guardian investigation, published in early April 2026, uncovered a sprawling network of at least eight unlicensed online casinos operating without UK authorization; sites like MyStake, Velobet, and Goldenbet sat at the heart of this operation, drawing in 2.3 million unique UK visitors each month from November 2025 through January 2026, even as regulators cracked down on licensed platforms.

Researchers pieced together how this network, orchestrated by Santeda International N.V. based in Curaçao, bypassed restrictions by targeting users who had self-excluded via GamStop; affiliates played a key role, promoting these platforms aggressively to those barred from UK-licensed sites, while the casinos flaunted bonuses and games unavailable to excluded players.

What's interesting here is the scale: data from traffic analytics showed those 2.3 million monthly uniques flooding in despite self-exclusion barriers, a figure that underscores how unlicensed operators exploit gaps in enforcement.

Santeda International N.V., licensed under Curaçao's gaming framework but not recognized by UK authorities, managed the backend for these eight sites; the company, registered on the Caribbean island known for lax oversight (or so observers note), funneled operations through a web of entities, linking back to Georgian businessmen via Upgaming AG, a firm providing software and platform services.

Upgaming AG, based in Georgia, supplied the tech backbone—everything from user interfaces to payment processing—allowing Santeda to scale rapidly; experts tracking domain registrations found patterns where new casino brands popped up under Santeda's umbrella, each mirroring the others in design and offerings, yet evading UK blocks.

But here's the thing: Curaçao's regulator, while issuing licenses, lacks the teeth to enforce against markets like the UK, where unlicensed sites face fines up to £5,000 per user; still, Santeda's model thrived, pulling in UK traffic via SEO tricks and affiliate networks that promised "no verification" access.

Affiliates drove the influx, with marketers on social media and forums pitching MyStake and its siblings directly to GamStop users; one common tactic involved ads claiming "play anywhere, anytime without limits," luring those frustrated by self-exclusion, while data logs revealed spikes in UK sign-ups post-holiday seasons when vulnerability peaks.

Those who've analyzed similar schemes point out how affiliates earn commissions on deposits—up to 50% in some cases—creating a incentive machine that ignores exclusion lists; GamStop, the UK's national self-exclusion tool covering licensed operators, held no sway here, leaving a loophole wide open for offshore sites to exploit.

And it worked: SimilarWeb data cited in the probe showed Velobet alone netting over 500,000 UK uniques monthly by January 2026, with Goldenbet close behind; users, often seeking slots or table games barred elsewhere, deposited via crypto and e-wallets, bypassing traditional checks.

The network dressed up legitimacy with AI-crafted personas; CEO Andres Markou, for instance, appeared across sites in stock photos and bios, but reverse image searches traced his face to generic AI generators, while no real records matched the name in Curaçao or Georgia registries.

Other executives followed suit—fictional compliance officers and directors listed on "about us" pages, complete with LinkedIn profiles that evaporated under scrutiny; this sleight-of-hand reassured hesitant players, mimicking licensed operators' transparency, yet it masked the unlicensed reality.

Turns out, tools like Midjourney and similar AI platforms fueled these deceptions, churning out headshots and testimonials; one researcher who dug into the code found embedded scripts pulling dynamic "executive" data, swapping names per jurisdiction to dodge flags.

Revenues from UK players didn't stay offshore; the Guardian traced funds through layered companies to Georgia, where Georgian businessmen connected via Upgaming invested in real estate like the Autograph Mall in Tbilisi, a luxury shopping complex under construction.

Bank records and corporate filings revealed shell entities in Cyprus and the Seychelles shuttling profits—estimated in the tens of millions annually—back to these projects; Upgaming AG, publicly touting B2B services, quietly powered the consumer-facing casinos, blurring lines between software provider and operator.

It's noteworthy that Georgia's gaming sector booms without stringent consumer protections; a European Gaming and Betting Association report highlights how such cross-border flows amplify risks, with UK losses feeding Eastern European developments.

Fraud allegations piled up alongside player complaints; users reported frozen withdrawals, bonus traps where wagering requirements spiked impossibly high, and accounts closed post-deposit without refunds, patterns echoed in forums like Casinomeister where MyStake drew dozens of red flags.

But the human cost hit hardest: a January 2026 coroner's inquest linked a suicide to unlicensed sites, with the deceased—a self-excluded Gambler—having racked up debts on Velobet equivalents; family testimony detailed how affiliates reached out via email, overriding GamStop barriers, leading to unchecked play.

Experts who've studied gambling harm note these operations prey on impulse, with fast-spin slots and live dealers designed for retention; UK data from before the probe showed unlicensed sites accounting for 20% of problem gambling referrals, a stat that aligns with the 2.3 million visitor surge.

Labour MP Alex Ballinger, chair of the Gambling-Related Harm All-Party Parliamentary Group, demanded immediate action from regulators in April 2026; he urged blocking IP access and affiliate crackdowns, arguing these sites "prey on the vulnerable," flouting self-exclusion entirely.

Ballinger's statement, issued post-probe, highlighted the inquest's findings, pressing for tools like payment blocking—already in use in Australia via its ACMA framework—to stem UK flows; his push gained traction amid rising calls from charities like BeGambleAware.

Now, with the story breaking in April 2026, enforcement watches intensify; domain seizures loom for non-compliant sites, yet the network's offshore roots complicate takedowns, as Santeda pivots brands faster than blocks land.

The Guardian's April 2026 exposé lays bare a cunning unlicensed casino web, from Curaçao's Santeda International through Georgia's Upgaming ties, amassing 2.3 million UK uniques monthly by sidestepping GamStop; AI fakes propped up the facade, profits built malls, and tragedies underscored the toll—all while affiliates cashed in on vulnerability.

Labour MP Ballinger's rallying cry spotlights the urgency, pushing for blocks that mirror global models; observers track whether April's revelations spark shutdowns, or if the network morphs again, slipping through digital cracks. The ball's in regulators' court now, with UK players caught in the crossfire.