I'd like to know the answer to this as well. Do you require login credentials from your users or what? I assume there's not some secret API for credit cards ...