When I signed up with Clickbank, an internet payment firm, I read the usual lofty statements about how they safeguard your data.
I use a little trick with each internet site I register with - I provide a highly customized email address which can come _only_ from Clickbank. E.g., clickbank0912f@myowndomain.com.
Lo and behold, I get a virus email to that customized address.
This means one of
a. Their employee(s) harvest data or steal data and sell it to scammers
or
b. Clickbank is itself doing it.
In either case, be very careful with this company since your financial information is obviously not safe with them.