Someone was kind enough to send me a similar e-mail and headers. Here's what I was able to find out and CCNow is a bit concerned as well.

Digital River is CCNow's parent company. "...an unparalleled network of over 21,000 software/shareware publishers; 20,000 physical goods companies; 600 online retailers and the largest group of pre-qualified software buyers on the Internet."

The e-mail she received was based on an order for a T-shirt from a totally different website. We know this because she used a different address for that order than she did with QJ. As I understand it, that website does not even use CCNow but has some other association with Digital River.

Digital River did send the e-mail. That could be because either she did not opt out of receiving promotional e-mail or opted into some web loyality/rewards program on some other site.

In that particular case, they should not have mentioned CCNow at all because it, and of course QJ had absolutely nothing to do with it. I just placed an order and there's no opt in/out button that I saw in the cart.

I pay a premium fee to have CCNow process payments. I do so because they are responsive and as standard practice do not bug anyone after the fact. The guy I talked to sounds more concerned than I was. I told him I'd forward the specifics but got sidetracked before I could. He called 5 minutes later asking if I had sent it yet. They don't want their good name sullied in any way either.

Bottom line - as far as I can determine QJ has nothing to do with these types of e-mails.