The activity, appearing to spread sanctioned funds to trigger account restrictions, occurred between Aug. 17 and Aug.

24.