It's the result of a risk calculation with limited information. Hanging out near war zones and sanctioned countries significantly increases the chance that you're committing financial crimes, so when they have some information that you're doing that kind of thing you're much more likely to trip an alarm.
VPNs don't help you with bank apps that report your GPS position.
Sanctions aren't particularly excellent at stopping bad actors.