Banks on their own issue ATM cash withdrawal, on line transaction passwords which are supplied by normal post and it is usually mentioned that CC customer should confirm the receipt and change the password at once at his/her end.
You may discreetly obtain the details of such a procedure from web site of this company and check if company has to confirm the receipt from customer before activating the password. There has to be a proper security policy put in place by the company.
You may obtain the certified copy of CC issuance form filled and signed by you. CC Company is under obligation to supply it to you. You may check whether you have signed on any clause that mentions issuance of ATM cash withdrawal, on line transaction facility to you. Company might have supplied MITC in the welcome kit. You may go thru it. However it shall be appropriate to check with your lawyer before you give anything in writing to company.
You may write to CC company in response to email mentioning “I MAY FILE A POLICE COMPLIANT “and demand that company may designate a competent employee who shall represent the company to file a police complaint along with you, at your location. You may also demand all the findings of the company so far so that the process is transparent and you can share it with police.
You may certainly file a complaint with Police Commissioner/ SSP in writing under acknowledgment preferably by email followed by letter { obtain complaint number} mentioning the facts that you have never used the card and it has been lying the envelope and you have never received any password for online transactions { if it is a fact} and request to put the cyber crime cell into action to unearth the fraud and let you know in writing the IP address of computer and place from which the fraudulent transactions were made.
Company shall certainly try to transfer the onus on you citing that security of password is your responsibility. You shall need to poke holes in the stand of the company.
It shall be appropriate to approach a competent and experienced lawyer specializing in such matters and consumer cases with all record and seek expert advice and submit carefully structured communications to company, police to suit you in the long run.