What Receipts Does the IRS Actually Require for HSA Reimbursement?

If you are saving HSA receipts for future reimbursement — whether that is next month or twenty years from now — the IRS has specific expectations about what those records need to contain. Vague documentation is not enough. And some records that feel like they should count do not.

Here is exactly what qualifies, what does not, and the most common mistakes people make.

The five required data points

IRS Notice 2004-50, Q&A-39 states that an account beneficiary must “keep records sufficient to later show that the distributions were exclusively to pay or reimburse qualified medical expenses.” IRS Publication 502 and Publication 969 further clarify what “sufficient records” means in practice.

Each receipt or record must include:

1. Patient name

The person who received the care. This could be you, your spouse, or a qualifying dependent under IRC §152. The patient does not need to be on your HDHP -- they just need to be someone whose medical expenses you can legally pay from your HSA.

2. Provider name

The doctor, hospital, clinic, pharmacy, lab, or other medical provider that delivered the service or product. A generic merchant name (like “CVS” on a credit card statement) is not specific enough if it does not identify the medical service.

3. Date of service

The date the medical service was performed or the product was purchased. This is critical because the expense must have been incurred after your HSA was established. The date of payment can differ from the date of service -- it is the service date that matters.

4. Type of service or product

What was provided. “Office visit,” “prescription -- amoxicillin,” “dental crown -- tooth #14,” “MRI -- lumbar spine.” The description needs to be specific enough that someone reviewing the record can determine whether it qualifies under IRC §213(d).

5. Amount paid

The dollar amount you actually paid out of pocket -- not the billed amount, not the insurance-negotiated rate, but the amount you were personally responsible for after any insurance payments.

What counts as a valid receipt

Any document that contains all five data points qualifies. The most common valid records:

Explanation of Benefits (EOB) from your insurer

This is often the best single document because it shows the provider, date of service, service description, and your patient responsibility after insurance processing. It also proves the expense was not fully covered by another plan, which matters for the no-double-dipping rule.

Itemized receipts or invoices from providers

A medical bill or invoice from your doctor's office, hospital, or pharmacy that breaks down what was provided and what you owe. Itemized is the key word -- a receipt that just says “$247.00” without describing the service is insufficient.

Pharmacy receipts

Most pharmacy receipts include the drug name, prescribing physician, date filled, and patient name. Since the CARES Act (2020), over-the-counter medications qualify without a prescription, but you still need a receipt showing what was purchased.

What does not count

Explanation of Benefits alone, without proof of payment

An EOB shows what your insurer processed and what your patient responsibility is. But it does not prove you actually paid that amount. Ideally, pair the EOB with a payment confirmation or provider receipt.

Generic retail receipts without medical detail

A receipt from a big-box store that says “Health & Beauty -- $34.99” does not tell the IRS whether you bought eligible bandages or ineligible cosmetics.

Common mistakes

Keeping only the credit card statement

This is the most common error, especially for pharmacy purchases and copays. The credit card statement feels like proof because it shows the amount and the merchant. But it fails on three of the five required data points: patient name, type of service, and specific amount paid for medical care vs. other purchases at the same merchant.

Not separating eligible from ineligible items on a single receipt

A single pharmacy or retail receipt often includes both HSA-eligible items (prescription medications, first aid supplies) and ineligible items (snacks, household goods). You need to clearly identify which line items are the qualified medical expenses. Highlighting or annotating the receipt at the time of purchase is the simplest approach.

Relying on memory instead of contemporaneous records

Five years from now, you will not remember whether that $200 charge at the optometrist was for prescription lenses (eligible) or non-prescription sunglasses (not eligible without a Letter of Medical Necessity). Capture the receipt when the expense occurs.

Not recording the patient name for family expenses

If you are tracking expenses for yourself, a spouse, and dependents, each receipt needs to clearly identify who received the care. This matters for audit purposes and for correctly populating Form 8889.

Assuming the provider will have records forever

Medical providers are generally required to retain records for 7 to 10 years depending on the state. If you are deferring reimbursement for 20 or 30 years under the shoebox strategy, the provider's records will almost certainly not exist when you need them. Your own records are your only protection.

Use the HSA Eligible Expenses Checker to confirm eligibility before logging an expense.

How long to keep receipts

The standard IRS audit window is three years from the filing date (six years if the IRS suspects a substantial understatement of income). But the shoebox strategy creates an unusual situation: if you are deferring reimbursement for decades, you need to retain records for as long as you defer, plus the audit window after the year you take the distribution.

In practice, this means indefinite retention. If you incur an expense in 2026 and reimburse yourself in 2050, you should keep the 2026 receipt at least until 2053 (three years after the 2050 tax year) and potentially until 2056 (six years) to be safe.

A note on EOBs and insurance records

If you have health insurance, your insurer's Explanation of Benefits is one of the most valuable documents for HSA record-keeping. It typically contains all five required data points, proves the expense was not fully reimbursed by another plan, and shows the exact patient responsibility amount.

Most insurers make EOBs available through their online portal. Download them promptly -- insurer portals do not guarantee access to historical records after you leave the plan, and employer-sponsored portal access often ends with your employment.

The bottom line

HSA receipt requirements are not complex, but they are specific. Every receipt needs five things: patient name, provider name, date of service, type of service, and amount paid. Credit card statements and canceled checks do not satisfy these requirements. And if you are using the shoebox strategy to defer reimbursement for years or decades, your own records are the only documentation that will exist when you need it.

Capture every receipt at the time of service. Store it digitally with redundant backups. Your future self -- and your future tax return -- will thank you.

This article is for informational purposes only and does not constitute tax advice. Consult a qualified tax professional before making HSA decisions. IRS guidance referenced: Notice 2004-50, Q&A-39; IRC §213(d); IRS Publications 502 and 969.