[noal]

Coming from a background of working with security for financial institutions (Banks, Creditcard companies and so on), I'd highly recommend re-evaluating this implementation from a liability perspective.

Feel free to send me a message (contact information in profile), and I can share advise on how the banking and creditcard industry deals with cross authentication and verification.