In all cases when I have received a new card (or a replacement for a card that has expired, account number is still the same), the card has come with a peel-off sticker that says something like "Call 1 800 CAPITAL to activate your card" (and the phone call must be made from the phone number that the credit card company has on file, or was on the application form submitted for a new card). It is also possible to go to the website (if application for the card was submitted online as this one likely was), and verify to the credit card company that the card is actually in the recipient's hands. So, how does this avoid someone stealing the card from the mailbox at the end of the driveway and activating it? Well, first, the card is sent in an envelope that is not festooned with the credit card company logo or have any other markings indicating that it contains a credit card. Second, the phone call must come from the phone that the company knows about (which is either inside the house or in the OP's possession), and if the Internet is used for activation, the thief must also have the login credentials for the card website. You didn't reveal those to a sugar daddy, did you?