I like the idea of per merchant account numbers. Even better if we used some kind of cryptographic binding between the merchant account and your account, so it would not work for anyone else.