Non-UK Casinos: Licences, Rules and the Best Offshore Sites for British Players

British players searching for casinos outside the UK Gambling Commission's reach are looking at a market that behaves very differently from home. Non-UK casinos operate under Malta, Curaçao, Gibraltar, Isle of Man or Kahnawake licences, and each of those regulators sets its own limits on bonuses, verification, self-exclusion and player recourse. This guide maps those differences with concrete numbers.

The appeal is practical, not ideological. UKGC-licensed sites enforce a £2 stake limit on online slots for players aged 18–24, mandatory affordability checks triggered at deposit thresholds, and full GamStop integration. Offshore operators skip some or all of that. Whether skipping it is a feature or a warning depends entirely on what you value and how you play.

Below, we compare three major licensing regimes side by side, review the actual mechanics of deposits, withdrawals and disputes outside the UK framework, and list operators with specific detail on each. Names you will recognise from British high streets appear alongside brands that never held a UK licence at all.

What Counts as a Non-UK Casino?

Is it just any site without a UKGC licence?

A non-UK casino is any real-money gambling site accepting British residents while holding its licence somewhere other than Great Britain. That covers Malta Gaming Authority (MGA) brands, Curaçao eGaming sites, Gibraltar Regulatory Authority operators and smaller regimes like Kahnawake or Anjouan. Geolocation does not decide your options; the licence on the footer does.

Practical test: scroll to the bottom of the homepage and read the licence number. A UKGC number looks like 000-039482-R-319410-012. An MGA licence reads MGA/B2C/123/2005. Curaçao sites display an 8048/JAZ prefix. If none of those appear, the operator is running without a recognised licence, which is a different category entirely and one worth avoiding.

Brands like Bet365 casino, William Hill casino, Sky Bet casino, Ladbrokes casino and Coral casino all hold UKGC licences, so they sit outside this guide's scope. The brands discussed here are those operating offshore or under foreign licences while still serving UK traffic.

Why do British players register at offshore sites?

Three reasons recur in player forums and affiliate traffic data. First, verification friction: UKGC rules require source-of-funds checks that can take days, while an MGA site may clear a first withdrawal in under 24 hours with a passport scan. Second, stake limits: the under-25 slot cap and stake ceilings make high-variance play expensive for younger British customers.

Third, self-exclusion overlap. GamStop blocks every UKGC site simultaneously, so a player who self-excluded and later regrets it finds all domestic doors closed for the chosen period of 6 months, 1 year or 5 years. Offshore sites are not part of GamStop, which is exactly why regulators created it and exactly why some players route around it. Both readings are legitimate.

Market scale gives context. The UK's online gambling gross yield was reported around £3.2 billion for the 2023/24 financial year by the Gambling Commission's industry statistics. Offshore operators serving UK players are not a rounding error on top of that figure; they are a parallel market that the Commission cannot directly tax or police.

Which licences can a non-UK casino actually hold?

The main regimes British players encounter are the Malta Gaming Authority, Curaçao eGaming, the Gibraltar Regulatory Authority, the Isle of Man Gambling Supervision Commission, the Kahnawake Gaming Commission and, increasingly, Anjouan and Cypriot white-label licences. Each has a public register where you can type the operator's name and confirm status.

Malta and Gibraltar are the strictest tier, with annual audit requirements and segregated player funds rules. Curaçao historically operated a single-licence system with looser oversight, though the new Curaçao LOK framework introduced in 2025 split licensing into B2C and B2C categories with defined solvency thresholds. Kahnawake and Anjouan sit further down in terms of player protection depth.

Key takeaway: match the licence to your risk tolerance. MGA or Gibraltar means a regulator you can complain to with a real escalation path. Curaçao post-2025 is improving but still thinner. An unlicensed site means no escalation path at all.

Licence Comparison: MGA vs UKGC vs Curaçao

How strict is the Malta Gaming Authority really?

The MGA licenses roughly 500 active operators and requires a compliance officer, segregated player funds held in separate bank accounts, and RNG testing by approved laboratories such as eCOGRA or iTech Labs. Bonus terms must be displayed before opt-in, and complaints must be answered within 10 working days before a player may escalate to the MGA's own ADR portal.

Enforcement is real. The MGA has revoked licences in public cases, issued six-figure administrative penalties and published enforcement notices naming operators. For a British player, that means a bad outcome at an MGA casino can be escalated to a body that has demonstrably acted against licensees before, not just a mailbox that reads complaints politely.

Practical detail worth knowing: MGA-licensed casinos cannot legally offer services to UK residents under their MGA passport in the same way they can to EU players, but many accept UK registrations through white-label arrangements or Curacao sister licences. The licence on your account's terms page is the one that governs your dispute.

What does the UKGC do differently?

The Gambling Commission applies rules that no other major regulator matches in granularity. Licensees must verify identity before any deposit, run affordability checks triggered by deposit patterns, display real-time spend indicators, and integrate with GamStop, GAMSTOP-style multi-operator self-exclusion, and the National Gambling Helpline. Marketing rules ban inducements tied to losses.

Stake and speed rules hit hardest for slots. Online slots have a £2 maximum stake for players aged 18–24 and a £5 limit for those 25 and over, with spin speed capped and auto-play removed from most titles. Feature buys are prohibited on UKGC sites. Those constraints are absent on an MGA or Curaçao casino, which is the single biggest behavioural difference British players notice when they cross over.

Financial penalties illustrate the Commission's posture. In 2023 and 2024, UKGC enforcement actions produced fines in the millions of pounds against major operators for social responsibility and anti-money-laundering failures. That money goes back to the National Lottery Distribution Fund, and the pattern signals a regulator willing to punish rather than warn.

Is Curaçao licensing as weak as its reputation suggests?

Historically, yes. Before 2025, Curaçao issued sub-licences through master licence holders with limited direct oversight of player complaints, no mandatory segregated funds requirement and no published enforcement database. Thousands of sites operated under a single 8048/JAZ number, making it hard to verify which entity actually held responsibility.

That is changing. The LOK framework that took effect in 2025 introduced separate B2B and B2C categories, capital requirements, and a requirement for operators to publish dispute resolution contacts. Early adopters include several crypto-friendly brands that previously relied on the old regime's flexibility. Verification of a current Curaçao licence now involves checking the operator against the regulator's public register rather than trusting a footer logo.

Key takeaway: a Curaçao licence issued before 2025 carries less player protection than an MGA licence. One issued after 2025 under the new framework sits closer to the middle. Either way, the practical protection comes from your payment method as much as from the regulator.

RegimePlayer fund segregationComplaint escalationStake limits on slotsGamStop integration
UKGC (Great Britain)Required via ring-fenced accountsIBAS, then Commission review£2 (18–24), £5 (25+)Mandatory
MGA (Malta)Required, audited annuallyOperator 10 days, then MGA ADRNone set by regulatorNot integrated
Curaçao (post-2025)Required under new rulesPublished ADR contact requiredNone set by regulatorNot integrated
GibraltarRequired, strict licence conditionsGRA complaints unitNone set by regulatorNot integrated
KahnawakeRecommended, not enforced uniformlyKGC dispute panelNoneNot integrated

What do these differences mean for a real deposit?

Take a concrete scenario: you deposit £200 at a UKGC casino, a MGA casino and a Curaçao casino, then request a £150 withdrawal after a short session. At the UKGC site, your identity and affordability data are already verified, so the withdrawal proceeds once internal checks clear, typically within 24–48 hours for e-wallets. At the MGA site, first-time verification may add a few hours for document review.

At the Curaçao site, withdrawal speed depends heavily on the operator rather than the regulator. Best-in-class Curaçao brands process e-wallet cashouts in under 12 hours; slower ones hold requests for manual review up to 72 hours. None of the three regulators sets a universal maximum processing time, which is why operator reputation matters more than the licence sticker in this specific dimension.

Bonus mechanics differ too. A UKGC casino must show wagering requirements before you opt in and cannot tie a promotion to chasing losses. An MGA casino can offer a 100% match with 35x wagering on the bonus amount, which is common and legal. A Curaçao casino might advertise 200% with 45x wagering and game weightings that make clearing it slower than it looks.

How Non-UK Casinos Handle Money, Bonuses and Verification

What payment methods can British players actually use offshore?

Cards still work at most MGA and Gibraltar sites, though some offshore operators decline UK-issued Visa or Mastercard transactions under issuer-side blocks. E-wallets like Skrill, Neteller and PayPal are common at Malta brands; PayPal specifically tends to appear only where the operator also holds a UKGC licence, so its presence offshore is inconsistent.

Crypto is where non-UK casinos diverge sharply from the domestic market. Curaçao and Anjouan sites routinely accept Bitcoin, Ethereum, USDT and Litecoin, sometimes with faster withdrawals than fiat rails. MGA-licensed casinos generally do not accept crypto under current licence conditions, which is a meaningful structural difference rather than a marketing preference.

Key takeaway: if you want crypto deposits and withdrawals, you are looking at Curaçao, Anjouan or Kahnawake operators by default. If you want PayPal or Open Banking, you are looking at sites that also hold a UKGC licence, which by definition removes them from this guide.

How long do withdrawals take outside the UK?

Benchmarks vary by method more than by jurisdiction. E-wallet cashouts at a well-run MGA casino typically clear in 0–24 hours after verification. Card withdrawals take 1–3 business days offshore, matching UK domestic times. Bank transfers add 2–5 business days regardless of licence. Crypto withdrawals range from 10 minutes to 2 hours at operators with automated payout queues.

The variable that matters is pending time, the window during which you can reverse a withdrawal. UKGC rules restrict reverse-withdrawal features; offshore sites often allow 24–72 hours of reversal, which is convenient if you change your mind and corrosive if you do not. Treat that window as a cost of doing business and consider setting a personal rule to let requests run.

Verification depth also differs. A UKGC operator may ask for bank statements or payslips once deposits cross a threshold set by their risk model. An MGA operator typically asks for photo ID, proof of address dated within 3 months and, occasionally, a card photo with middle digits masked. Curaçao operators range widely; the better ones match MGA standards, the weaker ones ask for little until a large win triggers review.

Are bonuses bigger offshore, and are the terms different?

Bigger headline numbers, yes. A typical welcome package offshore runs 100% to 200% on first deposit, sometimes split across three or four deposits, with free spins attached. Wagering requirements cluster around 30x to 45x the bonus amount. Max bet while wagering is commonly capped at £5 per spin, though some sites allow more, which accelerates clearing.

Game weightings are the trap. Slots usually contribute 100%, but table games may contribute 10% or 0%, and certain high-RTP titles from providers like NetEnt or Pragmatic Play are sometimes excluded entirely. A bonus advertised as "200% up to £1,000" with 40x wagering means £40,000 of qualifying turnover before withdrawal, a figure worth calculating before you opt in.

Key takeaway: read three lines before claiming. Wagering multiple, max bet during wagering, and game weighting. Those three numbers determine whether a bonus is worth accepting, and they are visible on every reputable operator's terms page before you deposit a penny.

BrandLicenceWelcome offer (indicative)WageringNotable for
Betway casinoMGA + others100% up to £25050x bonusSports and casino under one wallet
888 CasinoMGA / Gibraltar100% up to £20030x bonusLong-standing, listed parent company
LeoVegas casinoMGA100% up to £100 + 50 spins35xMobile-first, strong app
PlayOJO casinoMGA50 wager-free spins0x on spinsNo wagering on free spins
Casumo casinoMGA100% up to £50 + 100 spins30xRewards programme with trophies
Unibet casinoMGA100% up to £4050xLong history, bingo and poker attached
bwin casinoMGA100% up to £20035xEuropean sports heritage
VideoslotsMGA100% up to £200 + 11 welcome spins35xVery large slot library

Which providers do offshore casinos use, and does it matter?

Provider choice affects payout behaviour more than most players expect. Evolution dominates live dealer tables offshore as it does in the UK, with roulette, blackjack and game-show titles like Crazy Time available at both MGA and Curaçao sites. Pragmatic Play and Hacksaw supply a large share of slots, including high-volatility titles that UKGC sites sometimes restrict under stake rules.

NetEnt, Microgaming and Play'n GO appear across all licence types. The structural difference is availability of certain mechanics: bonus-buy features, autoplay and higher max bets are common offshore and restricted or banned on UKGC-licensed casinos. If you specifically play Hacksaw's Wanted Dead or a Wild or similar bonus-buy slots, offshore access is a functional requirement, not a preference.

Live casino deserves separate mention. Evolution-powered tables offshore often run higher table limits than UK equivalents, with VIP blackjack tables accepting £500 to £1,000 per hand compared to tighter caps at UKGC sites. Curotail-branded studios and smaller providers like Pragmatic Live fill the rest of the lobby.

What happens when you have a dispute offshore?

Escalation path matters. At an MGA casino, you first raise the complaint with the operator, who must respond within 10 working days. Unresolved cases go to the MGA's ADR channel, which publishes outcomes and can suspend a licence. At a Gibraltar site, the GRA complaints unit plays a similar role with a smaller caseload and, anecdotally, faster turnaround.

Curaçao disputes historically went nowhere. The post-2025 framework requires a published ADR contact, but the practical enforcement track record is still being built. Kahnawake has a dispute panel that has issued public rulings, though its caseload is modest. In all cases, having your own paper trail, screenshots of terms at time of deposit, chat transcripts, is the difference between a resolved complaint and a dead end.

Key takeaway: escalate in writing, with timestamps, and keep copies. Offshore regulators respond to documented cases with specific clause references, not to emotional summaries. The operators themselves often settle at the second or third formal message when the cited term clearly supports your position.

Top Non-UK Casinos for British Players in 2026

Which Malta-licensed brands are worth registering at?

LeoVegas casino holds an MGA licence and built its reputation on mobile performance; the app consistently ranks among the fastest for slot loading. Casumo casino runs a trophy-based rewards system that hands out free spins and bonuses through gameplay rather than deposit chasing. PlayOJO casino markets wager-free spins, which removes the single most common complaint about casino bonuses.

Videoslots carries an enormous slot catalogue, north of 6,000 titles by its own count, with provider filters that actually work. Unibet casino and bwin casino combine casino, bingo and poker wallets under one login, useful if you spread play across products. 888 Casino operates under a Gibraltar and MGA structure with a publicly traded parent, which raises the bar on corporate accountability.

Betway casino and Betfair casino round out the Malta tier with strong sports crossover. Betfair's betting exchange heritage means its casino sits alongside one of the largest peer-to-peer markets in Europe, and its welcome terms are typically clearer than average.

What about Curaçao-licensed operators?

Curaçao brands cluster around two profiles: crypto-native casinos and white-label operations. Crypto-native examples include Mr Vegas casino, Goldenbet casino and Mystake casino, which advertise rapid Bitcoin withdrawals and accept tokens alongside cards. White-label operators use a shared platform with custom branding, which means the underlying game library and cashier are often identical between sister sites.

Verification depth varies more here than at MGA sites. Some Curaçao operators ask for ID only above a withdrawal threshold, others verify at registration. Neither approach is inherently wrong, but a site that verifies nothing until you win big is a site where a large cashout may trigger a week of document requests. Choose accordingly.

Post-2025, several Curaçao operators have moved to the new B2C licence category and publish their registration details more visibly. Names to check against the register include Donbet casino, NineWin casino and Velobet casino, all of which accept UK traffic and offer both fiat and crypto cashier options.

Are there offshore brands British players already know?

Yes, and the overlap is larger than most guides admit. bwin casino, Sportingbet casino and Unibet casino all have long European histories and hold MGA licences covering their international operations. PartyCasino and Grosvenor Casinos are associated with UK high-street presence but their parent groups also run MGA-licensed international sites.

Brands like BetMGM casino, Hard Rock and DraftKings are expanding internationally under various licences, though their UK-facing products are separate. Meanwhile, established names such as Mr.Play casino, Duelz casino and Voodoo Dreams casino operate MGA licences with distinctive product angles, from duel-style tournaments to spell-based reward mechanics.

Key takeaway: a familiar name does not guarantee a familiar licence. Always confirm which entity and which jurisdiction governs the specific account you are opening, because the same brand family can hold a UKGC licence for British customers and an MGA licence for everyone else.

BrandLicenceCryptoMin depositWithdrawal speed (e-wallet)
Goldenbet casinoCuraçaoYes£100–12 hours
Mystake casinoCuraçaoYes£100–24 hours
Donbet casinoCuraçaoYes£100–12 hours
NineWin casinoCuraçaoYes£100–24 hours
Velobet casinoCuraçaoYes£100–24 hours
Duelz casinoMGANo£100–24 hours
Voodoo Dreams casinoMGANo£100–24 hours
Mr.Play casinoMGANo£100–48 hours

What separates a solid offshore casino from a weak one?

Licence status first. Confirm the operator appears in the MGA, GRA or current Curaçao register with an active, not suspended, status. Second, check the terms page for a named ADR contact and a stated complaint timeframe. Third, look at withdrawal policy in writing: processing windows, fees, document requirements at each tier.

Game library depth matters less than you think. A site with 3,000 slots from Pragmatic, NetEnt, Play'n GO, Hacksaw and Evolution covers virtually everything a British player wants. What separates operators is cashier reliability, bonus transparency and whether support answers in minutes or hours. Test support before depositing; a two-minute live chat question reveals a lot.

Responsible gambling tools offshore vary. MGA sites must offer deposit limits, session reminders and self-exclusion mechanisms, though none feed into GamStop. Curaçao operators are increasingly offering the same set. Set your own limits at registration regardless of licence, because the regulator's floor is not a substitute for your ceiling.

Responsible Gambling and Legal Standing in the UK

Is it legal for a UK resident to play at a non-UK casino?

Playing at an offshore casino is not illegal for the individual in Great Britain. The law targets operators, not players: it is an offence to provide unlicensed gambling services to British customers, not to accept them. That distinction explains why many offshore sites geo-restrict UK traffic while others leave the door open and simply do not market aggressively in the UK.

Tax treatment is straightforward. Gambling winnings are not taxable for individual players in the UK, whether the win comes from a UKGC or an offshore operator. Offshore casinos have no obligation to report your winnings to HMRC, and you have no obligation to declare them as income. Currency conversion fees on your card or e-wallet are the only realistic cost on top of stakes.

Key takeaway: legality sits with the operator, tax sits with nobody, and consumer protection sits with whichever licence you chose. That combination is exactly why the licence comparison above matters more than any marketing claim on a homepage.

What responsible gambling tools exist outside GamStop?

Every reputable offshore operator offers deposit limits, loss limits, session time reminders and a self-exclusion option ranging from 24 hours to permanent. MGA licensees must provide these as a licence condition. The limitation is scope: excluding yourself at one Curaçao site does nothing at its sister brands, and nothing anywhere feeds back into the UK's national system.

Independent tools fill the gap. Commercial blocking software such as GamBan and BetBlocker can be installed across devices and does not depend on operator cooperation. BetBlocker is free and blocks access to tens of thousands of gambling domains, including offshore ones. For a player who has self-excluded from UK sites and wants equivalent protection offshore, that software is the practical answer.

If gambling is causing harm, support exists regardless of where you play. In the UK, the National Gambling Helpline is 0808 8020 133, open 24 hours a day, 7 days a week. GamStop offers free self-exclusion covering all UKGC-licensed sites for 6 months, 1 year or 5 years. GamCare provides live chat and local treatment services, and GAMSTOP-style schemes are being discussed for extension to cover offshore operators reachable from Britain.

How do you verify a non-UK licence before depositing?

Start with the licence number in the site footer, then search that number in the regulator's public register. The MGA maintains a searchable licensee database at its official site; Curaçao publishes current licence holders under the new framework; Gibraltar and Isle of Man both maintain active lists. A footer logo with no matching register entry is a red flag, not a formality.

Second check: the operator's terms page should name a physical address, a licensing entity and an ADR provider. Third: independent review sites and player forums carry long-run signal about withdrawal behaviour. No single review settles it, but a pattern of unresolved payment complaints across 12 months is hard to fake.

Key takeaway: three minutes of verification beats three weeks of dispute. Register the licence number, confirm it in the register, read the withdrawal clause, then deposit. Skipping that sequence is how players end up writing long posts on forums about funds held "pending review" with no regulator to complain to.

Should you combine UKGC and offshore accounts?

Many experienced British players run both. UKGC sites for GamStop protection, PayPal deposits and the Commission's escalation path; MGA or Curaçao sites for wider slot choice, bonus-buy mechanics and crypto cashier options. Splitting bankroll across the two keeps each jurisdiction's strengths available without depending on either alone.

Practical hygiene applies. Keep separate deposit limits per site, track total monthly spend across both, and never chase losses across jurisdictions. The absence of a unified spend tracker offshore is precisely where players get into trouble, because three £200 deposits at three sites do not feel like £600 until the statement arrives.

Key takeaway: use the UKGC side for protection and the offshore side for product range, and keep your own ledger across both. The regulators cannot see each other's data, so the only complete picture of your gambling spend is the one you build yourself.

Frequently Asked Questions

Are non-UK casinos safe to play at?

Safety depends on the licence and the operator, not the geography. An MGA or Gibraltar casino with an active register entry, published ADR contact and a track record of timely withdrawals is a reasonable place to play. An unlicensed site, regardless of how polished the interface looks, offers no escalation path if something goes wrong. Verify the licence first, every time.

Do I pay tax on winnings from an offshore casino?

No. Individual gambling winnings are not subject to UK income tax or capital gains tax, whether the operator is UKGC-licensed or based in Malta, Curaçao or elsewhere. Offshore operators do not report your winnings to HMRC, and you have no filing obligation arising from them. Currency conversion charges on deposits and withdrawals remain your own cost to manage.

Can GamStop block me from non-UK casinos?

No. GamStop covers only operators licensed by the Gambling Commission in Great Britain. Offshore casinos are outside its scope entirely, which is why players who self-exclude domestically can still register at MGA or Curaçao sites. For equivalent protection offshore, install blocking software such as BetBlocker or GamBan across your devices, and set your own deposit limits at every site you use.

Which licence is best for British players offshore?

Malta Gaming Authority and Gibraltar offer the strongest player protection outside the UK: segregated funds, published complaint routes and enforcement history. Curaçao under the post-2025 framework is improving but thinner in practice. Kahnawake and Anjouan sit further down. Match the licence to what you are doing: bigger balances and longer sessions warrant the stricter regimes.

How fast are withdrawals at non-UK casinos?

E-wallet cashouts at well-run MGA sites typically clear within 0 to 24 hours after verification. Card withdrawals take 1 to 3 business days, bank transfers 2 to 5 business days, and crypto payouts at Curaçao operators often complete within 2 hours. Pending windows of 24 to 72 hours are common offshore, during which you can reverse a request if you change your mind.

Do offshore casinos accept GBP?

Many do. Malta and Gibraltar operators commonly list GBP alongside EUR, so deposits and withdrawals avoid conversion. Curaçao sites vary; some quote in USD or EUR and convert your GBP at their own rate, which can cost 1 to 3 percent versus the interbank rate. Check the cashier's base currency before depositing, because that spread is invisible until it appears on your statement.

Can I use PayPal at a non-UK casino?

Rarely. PayPal's gambling partnerships in the UK are tied to UKGC-licensed operators, so it seldom appears on offshore-only sites. Skrill, Neteller, Visa, Mastercard and bank transfer are the standard offshore rails, with crypto available at Curaçao and Anjouan operators. If PayPal is a hard requirement, you are effectively limiting yourself to the domestic market.

What happens if an offshore casino refuses to pay?

Escalate in writing first, citing the specific clause in their terms that supports your position, and keep screenshots with timestamps. If unresolved, contact the licensing regulator: the MGA has a formal ADR portal, Gibraltar's GRA runs a complaints unit, and Curaçao's post-2025 rules require a published dispute contact. Payment disputes resolved at the second or third formal message are common; documenting everything is what makes that work.

Are bonuses bigger at non-UK casinos?

Headline offers are larger offshore, frequently 100% to 200% on first deposit versus more restrained UK packages, with wagering clustered around 30x to 45x. The real comparison is turnover required: a £100 bonus at 40x means £4,000 of qualifying bets before withdrawal, and game weightings can stretch that further if table games contribute only 10 percent. Calculate before you claim, not after.

Which slot providers are available offshore but restricted in the UK?

Bonus-buy mechanics from Hacksaw, Nolimit City and similar studios are the clearest example: permitted offshore, banned on UKGC-licensed casinos. Higher stake ceilings on titles from Pragmatic Play and NetEnt also differ, with UK slots capped at £2 for players aged 18 to 24 and £5 for those 25 and over. Live dealer tables from Evolution offshore often run higher table maximums than their UK counterparts.

Non-UK casinos are a legitimate, regulated parallel market for British players, defined by which licence sits behind them rather than by any single characteristic of the brands themselves. Malta and Gibraltar deliver the closest experience to UK domestic protection; Curaçao is mid-transition under its 2025 framework; smaller regimes carry more variable outcomes. Verify the licence in the register, read three lines of bonus terms, set your own limits, and keep a ledger across every site you use, because no single regulator can see your whole picture.