HSA Audit Preparation: Your Questions Answered

An IRS letter questioning your HSA withdrawals can spike your heart rate more than any medical bill. The reality is, with rising HSA adoption and complex rules around eligible expenses, audits are a genuine concern for account holders. Proactive HSA audit preparation is the best defense against penalties and stress. This guide walks you through the process, from understanding audit triggers to building a defensible paper trail, so your healthcare savings remain secure.

28 questions covered across 4 categories

Audit Triggers and Red Flags

Understand what actions or patterns make the IRS more likely to examine your HSA withdrawals and contributions.

Documentation and Record Keeping

Learn how to build a bulletproof system for storing and organizing proof of your HSA transactions.

Handling an Active Audit

Steps to take if you receive an IRS notice about your HSA, and how to work through the process.

Preventive Strategies

Proactive measures you can take now to minimize the chance of an audit and ensure you are compliant.

Summary

Successful HSA audit preparation hinges on meticulous, ongoing record-keeping and a clear understanding of IRS rules. The core defense is a receipt for every withdrawal, proving it was for a qualified medical expense incurred after your HSA was established. Start organizing your documents now, conduct an annual self-review, and consider professional help if you receive an audit notice.

Pro Tips

  • Scan receipts immediately after purchase and name files descriptively (e.g., 2025-03-15_Dentist_CoPay_$50.pdf). Cloud storage with date stamps is superior to a shoebox.
  • For large, ambiguous expenses like home modifications for medical care, get a Letter of Medical Necessity (LMN) from your doctor before spending. An LMN is audit gold.
  • If you discover a past ineligible withdrawal, file Form 8889 and pay the income tax plus 20% penalty before the IRS contacts you. This shows good faith and may avoid further penalties.
  • Your HSA provider's Form 5498-SA shows your contributions, and your Form 8889 shows your withdrawals. These two documents must reconcile perfectly with your personal records.
  • Never commingle HSA funds with personal checking accounts for reimbursements. Pay the provider directly from the HSA or reimburse yourself in a single, documented transaction.
  • Use a dedicated credit card for all potential HSA-eligible expenses. The single statement simplifies tracking and provides secondary proof of purchase dates and merchants.

Quick Answers

What is the most common trigger for an HSA audit?

The single biggest audit trigger is a mismatch between the distributions reported on your Form 1099-SA (issued by your HSA provider) and the withdrawals you report on your personal tax return (Form 8889). If you withdraw money but don't report it, or report a different amount, it creates an automatic IRS flag.

How long do I need to keep HSA receipts and records?

You must keep records that support your HSA contributions and distributions for as long as the account is active, plus three years after you file the tax return for that year. Since HSAs can be open for decades, the practical rule is to keep everything forever. This includes receipts, Explanation of Benefits (EOB) statements, invoices, and proof of payment for every qualified medical expense you claim. Digital scans stored in multiple locations are the most reliable method.

What happens if I used HSA funds for something that wasn't eligible?

If you use HSA funds for a non-qualified expense, the distribution becomes taxable income. You must report it on your Form 8889 and pay ordinary income tax on the amount. If you are under age 65, you also owe an additional 20% penalty. During an audit, you would need to pay these amounts plus potential interest. The best course if you find an error is to voluntarily amend your return before the IRS identifies it.

Can I be audited for my HSA even if my overall tax return is simple?

Yes, absolutely. The IRS runs automated matching programs that compare the 1099-SA and 5498-SA forms from HSA administrators against individual tax returns. This is a separate process from a full tax return audit. Your return could be otherwise simple, but if there's a discrepancy in your HSA reporting, it can trigger a focused audit or notice specifically about your HSA. This makes accurate form filing critical.

What specific documents should I gather for HSA audit preparation?

Create an audit binder with clear sections. You need: 1) All HSA provider statements and annual tax forms (1099-SA, 5498-SA). 2) Receipts for every expense reimbursed, showing date, provider, service, and amount paid. 3) Corresponding Explanation of Benefits (EOB) from your HDHP insurer. 4) Your filed Form 8889 for each relevant tax year. 5) Proof of HDHP coverage for each year you contributed. 6) For any ambiguous expense, a Letter of Medical Necessity from your doctor.

Does my HSA provider help me during an audit?

Your HSA provider's responsibility is to report contributions (5498-SA) and distributions (1099-SA) to the IRS. They do not verify if your withdrawals were for eligible expenses; that burden is on you. They will not represent you in an audit. However, you can request copies of your historical statements and tax forms from them, which are essential evidence. Your relationship with the provider is administrative, not advisory, for tax matters.

Are dental and vision expenses safe from audit scrutiny?

While routine dental and vision care are eligible, they are not automatically safe. An auditor will check that the expenses meet IRS criteria. For example, teeth whitening is not eligible, but fillings are. Non-prescription sunglasses are not eligible, but prescription lenses are. You need the detailed receipt showing the specific service or product. A credit card charge to 'EyeCare Center' is insufficient; the itemized invoice is required to prove eligibility.

How does the IRS view reimbursements for expenses paid years ago?

The IRS allows you to reimburse yourself from your HSA for any qualified medical expense incurred after the HSA was established, even if it was years prior. However, this is a high-risk area in an audit. You must have impeccable proof: the original dated receipt and proof you paid out-of-pocket at that time (like an old bank statement). The auditor will scrutinize these 'old' reimbursements closely, as they are a common area for error or attempted misuse.

Related Resources

More HSA Resources

Still have questions?

HSA Trackr makes the complex simple. Track expenses, maximize deductions, never miss a reimbursement.

See It In Action