few points:
- This is not an exchange like bitstamp. I might not been clear. It's a place where people can buy or sell coins from/to the site, not to each other. Users won't have funds on the site, but only my bitcoins will be on a 3rd party bitcoin-supplier-per-purchase site.
- Obviously im working with a lawyer to have proper working procedures to obey by state regulations. So KYC would be part of it, specialy for cc transactions, and aworking procedure will be written.
- I'm hiring a coder to do the site and he's well aware of the security implications.
- If I want to stay compatative I must make cc payment instant. I have no other option about this, or I'll lose customers.