CoinDesk reported that these activities occurred between August 17 and August 24 and appeared to be an attempt to spread sanctioned funds to trigger account restrictions.