1. Competent authorities shall withdraw the authorisation of a crypto-asset service provider if the crypto-asset service provider does any of the following:

(a) has not used its authorisation within 12 months of the date of the authorisation;

(b) has expressly renounced its authorisation;

(c) has not provided crypto-asset services for nine consecutive months;

(d) has obtained its authorisation by irregular means, such as by making false statements in its application for authorisation;

(e) no longer meets the conditions under which the authorisation was granted and has not taken the remedial action requested by the competent authority within the specified timeframe;

(f) fails to have in place effective systems, procedures and arrangements to detect and prevent money laundering and terrorist financing in accordance with Directive (EU) 2015/849;

(g) has seriously infringed this Regulation, including the provisions relating to the protection of holders of crypto-assets or of clients of crypto-asset service providers, or market integrity.