I wonder why they don't say "Billing PIN"? Of course, that might get people sending them credit card PINs…