It's not on his account, he would have the credentials to make transactions with the account.