Is GGDrop Legit? Real UK Company, Two Terms, No Licence

The footer names a real company, and Companies House answers

GGDrop runs at ggdrop.com, a React app whose text loads in the browser. Opened logged out from a Chicago address on 16 September 2026, six pages rendered: the homepage, a case page, the User Agreement, the Privacy Policy, the Cookie Policy and Contacts.

The footer carries the operator in small grey type: "ITSFAIL LTD: Company number 13246765, 16 John Nicholas Crescent, Ellesmere Port, CH65 2DL, Cheshire, United Kingdom of Great Britain and Northern Ireland." The Contacts page repeats it as "Beneficiary", and the Privacy Policy names the same company as data controller.

Companies House resolves the number. ITSFAIL LTD is a private limited company, status Active, "Incorporated on 5 March 2021", nature of business "47910 - Retail sale via mail order houses or via Internet". It has one director, appointed on 30 September 2022, who is also the only person with significant control; the founding director resigned the same day. The register gives Ukraine as the director's place of residence and an Edinburgh correspondence address.

The company files. Accounts to 31 March 2025, filed on 10 April 2026, show net assets of £365,133, cash of £55,068, an average of one employee including the director, and a corporation tax charge of £20,970 against £52,658 the year before. On 28 May 2024 the register published a "First Gazette notice for compulsory strike-off"; the action was discontinued the next day.

One date does not fit. The footer reads "© 2018-2026", and the .com registry dates ggdrop.com to 23 February 2018. The company that now claims the site did not exist until March 2021. Whoever ran it for the first three years, the terms do not say.

The page title is "Sell, Buy and Trade CS2 Items on GGCS2". The banner reads "Sell, Buy & Trade CS2 items. Fixed listings. No Randomness". The footer describes "clear, market-based prices" and signs itself "© 2018-2026 GGCS2". The name GGDrop appears on the page only inside the support address and the URL.

The User Agreement matches that story. Section 3.1: "GGCS2 operates solely as an online marketplace platform facilitating peer-to-peer Transactions between Users." Section 3.2: "GGCS2 is not a seller, buyer, owner, or custodian of Items and does not set Item prices."

The Privacy Policy, linked from the same footer, describes a different product. Its purposes of processing include "providing services for access to the website and opening loot boxes", and it says the company monitors "suspicious activity during the process of opening loot boxes or accessing skins." The Cookie Policy refers three times to "services for access to the site and opening cases."

The homepage agrees with the policies, not the agreement. Thirty tiles sit under the banner, each named and priced, from Twins at 0.59 $ to Golden knife at 349.35 $. The first fifteen link to pages under /case/, and every one of them answers "You are not authorized! Log in to unlock." The other fifteen sit behind a Log in to unlock panel.

The site serves a second agreement it does not display. Its English text bundle at /locales/en/agreement.json is titled "GGDROP User Agreement", "Version 03.11.2025", and defines a Case as "a mechanism of random inventory determination." It sells "a paid, simple (non-exclusive) license to use the Case" and prices "services for access to loot boxes." We could not open the page that shows it: the site's script shows the marketplace landing to every visitor without a login, so the case-opening site exists only behind a Steam sign-in, and we did not sign in.

This is not new. Our own capture of the same homepage on 5 August 2026 shows the same banner, "Fixed listings. No Randomness", over a Safari Skin Hunt event, with 1,302,473 users in the header.

The Gambling Commission's public register, searched on 16 September 2026, returns "No results for \"itsfail\"", "No results for \"ggdrop\"" and "No results for \"ggcs2\"". No page we opened names a licence, a licence number or a regulator.

What the terms name instead is a statute. Section 7.1: "GGCS2 complies with the United Kingdom of Great Britain and Northern Ireland Money Laundering and Terrorist Financing Prevention Act and FATF standards." A title search on legislation.gov.uk for that name "has returned no results."

An Act by that exact title exists. Riigi Teataja, Estonia's official gazette, publishes the "Money Laundering and Terrorist Financing Prevention Act", passed on 26 October 2017, whose stated purpose is to protect "the financial system and economic space of the Republic of Estonia." The Privacy Policy says: "We store Personal Information on our servers in Estonia."

The undisplayed GGDROP agreement cites the same Act by the same name, and adds that suspicious activity may be reported to "the FIU of the United Kingdom of Great Britain and Northern Ireland."

The site places the company in Ellesmere Port. The register places its director in Ukraine, with correspondence to Edinburgh. Trustpilot's company details, "Written by the company", give "Rizka 109, 04060, Kyiv, Ukraine" and support@ggdrop.com; the site itself directs support to support@ggdrop.to.

The Trustpilot blurb describes a "Leading CS entertainment platform with 8+ years on the market, trusted by 5M+ users worldwide" with "150+ top-tier cases." The site's own header counted 1,336,939 users on 16 September 2026 and 1,302,473 on 5 August. The company behind both figures reported one employee.

The displayed agreement says completed transactions "are generally non-refundable", that the company "may suspend Transactions, freeze Balances, or terminate Accounts" for compliance, that "Multiple accounts are strictly prohibited", and that liability is "limited to the amount of fees paid by the User for the last Transaction."

The undisplayed GGDROP agreement is harder. An item won from a case must be claimed "within one (1) hour"; "Inaction by the User during this hour means the sale of the obtained Inventory" for bonus points. "Withdrawal of funds is available only to the account that was used to open the cases", and "The Service does not provide any refunds if the money has been fully or partially spent on the website." No payout time is published on any page we opened.

Trustpilot holds 277 reviews at 2.2 on a profile claimed in January 2022: 63% five-star, 31% one-star, ten reviews in the last twelve months. The profile shows "Replied to 11% of negative reviews" and "Typically takes over 1 month to reply."

The most recent one-star reviews describe accounts banned after a win. One from May 2026 reports a case worth about $90, an instant ban for multi-accounting on a shared-IP connection, and an offer of full identity verification that was refused; the company's reply is dated September 2026. One from September 2025 says the site "don't provide any Provably Fair system"; the newest review, four stars from September 2026, says the opposite. The site's script references a provably-fair route, but it is behind the login and we could not open it. We have not deposited on this site and cannot test any of this.

Confirmed from GGDrop's own live pages, Companies House, the Gambling Commission register, legislation.gov.uk, Riigi Teataja and Trustpilot on 16 September 2026: the company is real, Active, incorporated in March 2021, and filed accounts in April 2026; the logged-out agreement describes a marketplace while the privacy and cookie policies describe loot boxes; the UK register holds no licence for the company or either brand; the Act the terms cite by name is Estonia's; the site's own bundle carries a second, case-opening agreement.

Not confirmed: who ran ggdrop.com between February 2018 and March 2021; which agreement a signed-in user is shown, since we did not sign in; whether a provably-fair page exists behind the login and what it verifies; whether a withdrawal arrives, and how fast; which countries are blocked, since no page prints a list; and the site's history before 5 August 2026, because the Internet Archive was offline throughout our check.