customer_id that belongs to another business is reported as CUSTOMER_NOT_FOUND, identically to one that does not exist — confirming the id is real would itself leak across businesses.curl --location 'https://api.sandbox.vrtx.sa/customers/' \
--header 'Authorization: Bearer <token>'{
"customer_id": "cust_00154344290ab",
"external_reference": "E0016",
"full_name": "Ahmed Al-Otaibi",
"mobile_number": "9665XXXX4290",
"status": "active",
"wallet_account_number": "000100012345",
"wallet_iban": "SA110292929000000100012345",
"currency": "SAR",
"created_at": "2026-06-14T09:32:03.907Z"
}