Arculus Wallet Review

We reviewed Arculus's setup and recovery guides, company filings and App Store feedback without testing a card or making transactions.

The Arculus Cold Storage Wallet combines a metal card with the Arculus Wallet app. Tapping the card against a compatible phone provides the NFC connection used in its signing process. The card needs no charging cable.

Arculus Holdings LLC is based in Somerset, New Jersey. Its wallet belongs to CompoSecure's business. The corporate parent completed its GPGI rebrand in January 2026 and trades on the NYSE as GPGI. Customers keep custody of their crypto themselves.

Arculus also sells authentication and enterprise technology, separately from its consumer wallet. The wallet card is not an ordinary bank payment card. Phone compatibility limits your crypto wallet selection, since Arculus needs NFC and a supported Android or iOS version.

Card Protection And Phone Dependence

Arculus stores private keys in the card's secure element and describes that chip as CC EAL6+ certified. The certification claim concerns that component. The phone app, connected services and your recovery backup have separate security requirements.

CompoSecure's December 2024 SEC correspondence describes key creation by Arculus software, with recovery generation involving the card and companion app locally. During setup, the recovery words appear on the phone. Keeping that backup private is part of securing the wallet.

Card possession and a six-digit PIN are part of transaction approval. Biometrics can be enabled or disabled during setup.

The card has no screen. WalletScrutiny's assessment identifies the lack of an interface for checking transactions on the hardware itself. A compromised phone could misrepresent a destination or approval without giving you a second display to compare. Checking an unfamiliar smart contract remains your responsibility before signing.

Software Transparency And Audit Disclosures

Arculus supplies its wallet under proprietary usage terms that restrict modification and reverse engineering. Its recovery words follow the public BIP39 standard. A wallet supporting the same assets and derivation paths can use those words and any enabled passphrase to restore access.

Company correspondence filed with the SEC identifies a Halborn audit in 2024 and a Kirkpatrick Price SOC II review in 2023. The latter concerns software-development processes. Two December 2024 letters also identify Stratum Security, but disagree on whether its audit took place in 2021 or 2023.

The filings name historical reviews without supplying detailed audit findings or a verdict on the current wallet version. Buyers looking for independent security validation need to distinguish those company statements from an auditor's assessment of the software they will use.

Phishing Reports And Recovery Exposure

Arculus users posted fake firmware-update emails on Reddit in June 2023. Another Reddit discussion describes an unsolicited chip-patching email with an August 2026 deadline that eventually requested recovery words. Neither discussion establishes a successful card exploit or how the senders obtained contact details.

Arculus's own security guidance warns about fake update requests and websites asking for recovery phrases. The guidance also distinguishes locked card hardware from updates delivered through the official phone app store.

Arculus shows the backup words on your phone during setup. Copy them privately, and keep them out of websites reached through emails or support messages. Someone with those words and any enabled passphrase can restore a compatible wallet without the original Arculus card or its PIN.

Arculus supports native Bitcoin network transfers alongside assets on Ethereum, Solana, XRP Ledger, Cardano, Polkadot and other listed networks. Its supported-currency table lists storage, transfer, buying, swapping and staking availability separately for each asset.

For Ethereum and its assets, network selection is as important as the ticker. An exchange withdrawal must match a network supported for that asset in Arculus. Custom tokens also remain tied to blockchains the wallet supports.

The app's gallery supports NFTs on networks including Ethereum and Solana. Compressed Solana NFT sending, however, was still a coming-soon feature in the August 2026 release notes. Check the specific NFT format and action before transferring it into Arculus.

Starting With A New Card

Arculus's setup lets you choose both the length of the recovery phrase and whether to add a passphrase.

1. Install the official Arculus Wallet app and accept its terms.
2. Hold the card against the phone when prompted and select Create New Wallet.
3. Choose 12 or 24 recovery words, your biometric setting and the optional passphrase setting.
4. Set and confirm the six-digit PIN, then tap the card again.
5. Write down the recovery words privately and complete the word-order check.
6. Name the wallet and enable the assets you intend to use.

If you enable a passphrase, preserve it accurately alongside the recovery words. Under BIP39, a different passphrase produces a different wallet. The card's PIN serves a separate purpose: authorizing use of the signing device.

Quick setup initially enables fewer assets to reduce NFC timeout interruptions. Additional currencies can be enabled afterward. Hold the card in the correct position throughout each NFC interaction.

Losing A Card, Phone Or PIN

A lost card can be replaced and the wallet restored with its recovery information. Moving to another phone also requires the restore process. Arculus's recovery guidance says three incorrect PIN entries force a restore. Locate your backup before making further attempts.

Recovery outside Arculus requires a wallet that supports the same assets and derivation paths. Those paths determine the addresses created from a recovery secret. Check both requirements as well as BIP39 support, and preserve any passphrase you enabled.

If you lose the written backup, a working app and card still give you access to your coins. Losing or breaking that remaining setup would leave you without a recovery route. Arculus cannot retrieve forgotten recovery words.

After restoring, use Manage Assets to enable the currencies you held. Check that display setting when a restored wallet appears empty.

Multiple Cards And Customer Support

One Arculus card stores one wallet at a time, but the app can manage several distinct wallets, each with its own card. Creating or restoring a different wallet on an existing card overwrites the keys previously stored there. Keep the earlier wallet's recovery information before reusing its card.

An April 2023 App Store reviewer reported that a replacement card resolved an NFC pairing problem. A July 2024 reviewer reported an unsuccessful restoration, while the developer said the restored address differed from the original. The accounts describe individual support cases, with different outcomes.

Use the official Help Center for card or restoration problems. Its guides cover replacement cards, setting a new PIN during restore and restoring wallets from an existing backup.

WalletConnect, MetaMask And Safe

WalletConnect links the mobile app to compatible websites through a QR-code connection, separately from the NFC link between phone and card. NFT marketplaces are one use: their approval request appears in Arculus, where the card and PIN authorize signing.

Arculus also supports a MetaMask browser wallet connection using a computer's webcam and a QR code from the phone app. This setup selects the first wallet address and keeps signing on the phone-and-card workflow. The recovery words stay out of the browser extension.

The standard Arculus wallet is not a native multisignature wallet. Its address can, however, act as an owner of a Safe account connected through WalletConnect. Safe's additional owners and approval rules belong to that separate account.

Swaps, Staking And Cash Access

In-app swaps route through providers including Changelly and n.exchange. The input asset leaves your wallet for the provider during execution, then the chosen output asset is returned. The provider handles that exchange step even though you retain your wallet keys.

Arculus offers native staking for assets such as ADA and SOL. Liquid staking returns a staked token, while its third-party staking category uses a provider-selected pool. The September 2026 staking guide lists a 15–20-day warmup before ADA accrues rewards, compared with three days for SOL. Review your chosen route's minimum, fees and exit conditions before committing funds. Staking returns are not guaranteed.

MoneyGram cash access uses USDC on Stellar at participating locations. The flow asks for personal details and location selection. Eligibility depends on the service's regional availability as well as holding USDC on that specific network.

The consumer store displayed a discounted price of $59.76 against $99 on September 9, 2026. Taxes were excluded. Check the chosen variant and delivery total before ordering, especially for international purchases.

Arculus charges no separate fee for sending or receiving supported crypto, but blockchain transaction fees still apply. Its app is free to download. Buying and swapping introduce provider costs, and the quoted exchange rate affects the amount you receive.

Arculus identifies Onramper and Changelly among its service providers and says their charges are displayed before buying or swapping. Compare the quoted output amount before approving the transaction.

Arculus's direct-purchase terms provide a two-year limited card warranty. It covers qualifying hardware faults and card replacement, not reimbursement for lost crypto.

Delivery is available in the US and many other countries, with exclusions including China, Russia and Iran. Delivery eligibility and the availability of a particular buying, swapping or cash service are separate questions.

Arculus is a reasonable fit if you already manage supported assets on a compatible phone and prefer tapping a card to connecting a separate powered device.

• Choose it if you will maintain an offline backup and accept phone-based transaction checks.
• Consider it for separate wallets in one app when buying a card for each is acceptable.
• Look elsewhere if independent on-device address verification is a requirement.
• Avoid buying before checking your exact networks, phone compatibility and provider access.

The card format removes charging from routine use. Your phone supplies the transaction display and shows the recovery words during setup, so protecting that device remains part of using Arculus safely.