Self-Exclusion Across Borders: What Actually Follows You in 2026

National self-exclusion registers are one of the most important pieces of consumer protection in online gambling, and one of the least well understood. GamStop in the UK, Spelpaus in Sweden, Cruks in the Netherlands and ROFUS in Denmark all promise to lock a player out of every licenced casino in their country for a chosen period. They deliver on that promise. What they cannot do, and what most people assume they do, is follow a player across a border into a casino licenced somewhere else. That gap is the whole story.

The four schemes at a glance

GamStop is the UK Gambling Commission’s central register. Every UKGC-licenced operator is obliged to check every new and existing customer against it before allowing play. Registration is voluntary from the player’s side, with options of six months, one year, or five years. Once you are on, no UKGC licensee will accept your deposit.

Spelpaus is Sweden’s equivalent, run by Spelinspektionen. It uses BankID for enrolment, which makes it functionally impossible to spoof, and every Swedish-licenced operator queries it in real time before you can log in. Registration periods run from one month to indefinite.

Cruks (Centraal Register Uitsluiting Kansspelen) is the Dutch register, mandatory since the KOA Act opened the market in 2021. Enrolment is via DigiD and blocks access to every KSA-licenced operator, as well as land-based casinos and gaming halls in the Netherlands. Minimum period is six months.

ROFUS (Register Over Frivilligt Udelukkede Spillere) is the Danish scheme, administered by Spillemyndigheden. It works similarly to Spelpaus, uses MitID for enrolment, and covers every Danish-licenced casino and betting operator. Periods run from 24 hours (a genuinely useful cooling-off tool) through to permanent.

How enforcement actually works

The mechanism is the same in all four countries. When you try to open an account or log in, the operator’s system queries the national register using your identifier (national ID for Sweden and Denmark, DigiD number for the Netherlands, full name and date of birth plus email/postcode for the UK). If you are on the list, the account creation fails or the login is blocked. Some schemes also fire back a payment-block instruction, so even if an existing account leaks through, deposits will not settle.

Two important limits sit on top of this. First, the check only happens against operators holding a licence in that country. A UK player who signs up with a Curacao-licenced casino is not checked against GamStop because the Curacao operator has no legal obligation to consult it. Second, the check identifies people, not devices. A VPN does nothing to defeat a real ID check, but crossing into a foreign licence quietly does.

Scheme by scheme, side by side

Note the pattern. Every scheme is bulletproof inside its own borders and legally powerless outside them. The identifier types differ (Nordic countries use hard national IDs, the UK relies on softer personal data), but the boundary of enforcement is identical.

Where the gaps are, and who exploits them

There are two kinds of gap. The intentional one is the offshore market: casinos licenced in Curacao, Anjouan, Kahnawake or on Isle of Man B2C licences that accept players from restricted countries. Because these operators do not hold a UK, Swedish, Dutch or Danish licence, they are not required to query the national register. A UK player on GamStop can, with a foreign card or a stablecoin wallet, deposit at a Curacao casino tomorrow. This is not a bug in the scheme; it is a limitation of licensing law.

The unintentional one is patchy inter-scheme sharing. There is no European-level register. A Swede on Spelpaus can perfectly legally play at a Dutch KSA site because KSA has no visibility into Spelpaus, and vice versa. In practice a player would need a Dutch BSN and a KOA-approved payment method to actually deposit, so the exposure is small. But the theoretical crack is real, and the gambling industry’s own body (EGBA) has been pushing for years for an EU-level cross-recognition standard. It has not happened, and there is no sign that it will before 2028.

The middle ground is the “non-GamStop” and “casino utan Spelpaus” category that markets itself directly to self-excluded players. Some of these operators are legitimate MGA or Estonian licensees who accept the player because they are not obliged to check the register. Others are less careful. The UKGC, KSA and Spelinspektionen have all issued warnings and hefty fines to sites that actively target self-excluded players, and the enforcement is real, but the black-market long tail is genuinely hard to shut down.

Practical guidance if you have signed up

A few things worth knowing if you are already on one of these registers. You cannot reverse enrolment inside the minimum period, even by writing to the regulator. Every scheme has a cooling-off design specifically to prevent same-day reversal. Deposits made at a licenced operator after enrolment must, by law, be returned; if that has not happened, complain first to the operator and then to the national regulator.

If you know you have played at a foreign-licenced site while excluded from your national register, the money is almost never recoverable. Foreign licensees have no obligation to refund and, because you deposited voluntarily and identified yourself truthfully, you have no chargeback grounds. This is worth stating plainly because a lot of consumer forum threads assume otherwise.

Finally, if you move country during your exclusion, your original registration continues in the country of origin but does not transfer. A UK expat on GamStop who moves to Sweden is not automatically on Spelpaus and would need to enrol separately. This catches more players than you might expect, especially in the 25 to 40 bracket working between London, Amsterdam and Stockholm.