No, this is totally reasonable and basically what I meant by 'escrow' in my original comment. Most systems that perform microtransactions & handle credit card stuff themselves basically do it this way -- including Google, when it comes to Adsense and Adwords.