This is from Master Direction – Credit Card and Debit Card – Issuance and Conduct Directions, 2022 Chapter-II, 6, (a),:
vi. Card-issuers shall seek One Time Password (OTP) based consent from the cardholder for activating a credit card, if the same has not been activated by the customer for more...