1. Use cards with non-VBV BINs i.e. cards that don't support the 3DS protocol. You can use a checker like @SDBB_Bot or @SabTeamCCchecker_Bot on Telegram to check if a BIN is non-VBV.
2. Use OTP bots. These are bots that try to trick the cardholder into giving you the OTP code. Some examples are @realmrjayotpbot and @otpvalleybot. I don't know however if these are legit.
3. You can buy a card from shop that has access to the cardholder device and forwards the OTP code to you. The only one I know is "blackbay.cc". Again I don't know if it's legit.