# Onboard a customer This is the whole onboarding flow, end to end. By the time you finish reading it, you have given a customer a private on-chain account and a way to fund it. There is no wallet for them to install and no chain for them to learn.  Create the account with a viem account you hold for the customer. It costs nothing and writes nothing to the zone until money arrives. ```ts import { privateKeyToAccount } from "viem/accounts"; // load the key from your own secret store / env; the SDK never sees the raw key const aliceAccount = privateKeyToAccount(process.env.ALICE_PRIVATE_KEY as `0x${string}`); // the account is its address; tag it with your own labels in metadata const { address, virtualAddress } = await kakushi.accounts.create({ account: aliceAccount, metadata: { customerId: "alice" }, }); // show `virtualAddress` to the customer, or to whoever is paying them ``` The payer sends USDC to that address from any wallet, with no awareness of Kakushi. When it lands, you get a webhook and the balance appears in the zone. The `customerId` you put in `metadata` comes back on the event, stored by the node against the account, so you need no lookup table of your own. ```ts // your webhook handler if (event.type === "deposit.credited") { // event.metadata.customerId is the label you attached at claim time creditCustomer(event.metadata.customerId); } ``` ```ts import { privateKeyToAccount } from "viem/accounts"; // alice's account; the key lives in your secret store, the SDK never sees it const aliceAccount = privateKeyToAccount(process.env.ALICE_PRIVATE_KEY as `0x${string}`); const balance = await kakushi.balances.get(aliceAccount, { token: "USDC" }); ``` :::tip The account materializes on first deposit, so you can hand out a virtual address before the customer has ever touched the zone. The sender does not need to know whether the recipient "exists" yet. :::