EOBs Make Better HSA Records

Health savings accounts offer one of the best tax treatments in the Internal Revenue Code: deductible or excludable contributions, tax-free growth, and tax-free distributions for qualified medical expenses.¹ But that tax benefit comes with a recordkeeping burden. If you take an HSA distribution, you need to be able to substantiate it later if the IRS asks.²

The key point is that the law does not require a single magic document type. It requires records sufficient to support the tax treatment of the distribution.² That shifts the real question from What counts as an HSA receipt? to What records would actually let a taxpayer prove the expense later?

In many cases, an Explanation of Benefits belongs near the top of that list.

Not because the IRS has officially designated EOBs as the one true HSA receipt. It hasn't. But because an EOB often captures exactly the information a taxpayer needs to reconstruct what happened: when care was provided, who provided it, how the claim was adjudicated, what insurance paid, and what the patient still owed.³

The Legal Foundation

IRC §223 creates the HSA regime. It defines eligible individuals and high deductible health plans, ties qualified medical expenses to IRC §213(d), excludes qualifying distributions from income, and imposes an additional 20% tax on distributions that are not used for qualified medical expenses.¹ What it does not do is prescribe a particular receipt format or a list of required substantiation documents.

That general recordkeeping duty comes from IRC §6001 and Treas. Reg. §1.6001-1(a). Together, they require taxpayers to keep records sufficient to establish the amounts and other items required to be shown on a return.²

For HSA distributions, the IRS applied that general rule in Notice 2004-50. Q/A-39 says the account beneficiary must keep records sufficient to later show three things:

1. the distribution was used exclusively to pay or reimburse qualified medical expenses,
2. those expenses were not previously paid or reimbursed from another source, and
3. those expenses were not previously taken as an itemized deduction.³

That is the operative HSA substantiation rule.

What a Defensible HSA File Should Show

The HSA authorities do not provide a single IRS-designed checklist. In practice, though, a defensible HSA file usually needs to answer five questions:²³⁴

Some tax writers use the familiar phrase "amount, date, place, and essential character." That language comes from the substantiation rules under §274(d) for certain business expenses, such as travel, gifts, and listed property.⁵ It is a useful analogy because it describes the kind of detail strong records contain. But it is not the HSA rule itself, and it is better not to present it as though the IRS has adopted a standalone four-part HSA test.

Why EOBs Are Strong HSA Records

An EOB is a claims-adjudication record generated by the payer. It often shows the date of service, the provider, the billed and allowed amounts, the amount paid by the plan, and the member's responsibility after adjudication.⁶⁷ That makes it a strong record for several parts of the HSA substantiation problem.

A simple mapping looks like this:

This is why an EOB is usually stronger than a bare bank statement or card statement. A line that says CVS $84.17 may show that money was spent, but not what was purchased. An EOB usually ties the expense to a specific medical claim and separates the insurer-paid portion from the patient's responsibility.³⁴

What an EOB Does Not Prove by Itself

This is the important limitation.

An EOB does not necessarily prove that the patient actually paid the provider. It usually shows what the member owed after adjudication, not whether that balance was later paid, written off, reimbursed by another arrangement, or left unpaid.⁴

An EOB also cannot, by itself, prove that the taxpayer did not later claim the same expense as an itemized deduction. Notice 2004-50 makes that part of the taxpayer's own substantiation burden.³

And while EOBs available through modern payer APIs can include rich clinical and financial detail, actual fields vary by payer and implementation. Not every EOB will carry every optional data element in the FHIR standard.⁷

So the strongest practical HSA file is usually:

1. the EOB,
2. proof of payment for the patient-responsibility amount, and
3. a taxpayer record showing the expense was not reimbursed from another source and was not previously taken as an itemized deduction.³⁴

That is a more defensible claim than saying an EOB alone solves substantiation.

Why This Matters for the "Shoebox" Strategy

Notice 2004-50 says there is no time limit on when an HSA reimbursement distribution must occur, so long as the expense was incurred after the HSA was established.³ That is what makes the familiar HSA "shoebox" strategy possible: pay qualified medical expenses out of pocket now, leave HSA assets invested, and reimburse yourself later.

But delayed reimbursement turns record durability into a real compliance problem.

Paper receipts fade. Merchant descriptions are vague. Years later, a taxpayer may still be able to show that money left a bank account, but not why. EOBs can be a meaningful upgrade because they are based on adjudicated claims data and are increasingly available in standardized digital form.⁷

CMS requires impacted payers to make claims and encounter data available through a FHIR-based Patient Access API, and HL7's ExplanationOfBenefit resource is specifically designed to communicate adjudicated claim information to patients and subscribers.⁷ That makes EOBs easier to store, search, and retrieve over long periods than a pile of fading paper receipts.

That does not make EOBs the only acceptable HSA record. It does make them one of the most useful records to keep.

Why HSA Substantiation Differs from FSA and HRA Substantiation

Health FSAs and HRAs generally operate through administrator substantiation before reimbursement. IRS guidance in Revenue Ruling 2003-43 and Notice 2006-69 discusses receipts, EOBs, and debit-card substantiation methods in that context.⁶

In other words, EOBs already appear in IRS guidance as recognized substantiation documents for related health-benefit arrangements. But HSAs use a different administrative model.

With an HSA, the account holder can take a distribution without getting prior approval from a plan administrator. The tax consequences are determined later based on whether the distribution was used for qualified medical expenses and whether the taxpayer has records sufficient to prove that.¹³⁴

That is why HSA substantiation is fundamentally a taxpayer recordkeeping problem rather than a third-party preclearance problem.

What This Means for HSA Products

The IRS has not published a hierarchy of HSA documents saying that an EOB is always superior to every other record. The law is functional, not formal. The question is whether the taxpayer's records are sufficient.²³

That said, a product that helps users retrieve, store, and organize EOBs alongside proof of payment and distribution history is solving a real substantiation problem. It gives the taxpayer a better chance of demonstrating:

• what service occurred,
• when it occurred,
• which part insurance paid,
• which part the taxpayer was responsible for, and
• how the HSA distribution ties back to that unreimbursed expense.³⁴⁷

That creates a real product opportunity: help taxpayers turn scattered claims data and payment evidence into a durable HSA audit file.

Regulatory Summary

Conclusion

HSA substantiation is not about using one IRS-approved document. It is about keeping records sufficient to show that a distribution was used for a qualified medical expense, was not reimbursed from another source, and was not previously taken as an itemized deduction.

That is why EOBs matter. They are often one of the strongest records a taxpayer can keep because they typically show the service date, provider, adjudicated amounts, and the portion of the claim that became the patient's responsibility. On their own, they may not prove final payment or rule out every form of double dipping. But paired with proof of payment and a clean reimbursement record, they form the backbone of a durable HSA audit file.

For anyone using an HSA as a long-term savings vehicle, that matters. The longer the gap between the medical expense and the eventual reimbursement, the more valuable durable, structured records become. A well-preserved EOB is not the only way to substantiate an HSA distribution, but in many cases it may be one of the best records to have when the time comes to prove it.

Footnotes

1. IRC §223; IRC §213(d); IRS Publication 969; IRS Notice 2004-2. ↩ ↩² ↩³

2. IRC §6001; Treas. Reg. §1.6001-1(a). ↩ ↩² ↩³ ↩⁴ ↩⁵

3. IRS Notice 2004-50, Q/A-39; IRS Publication 969. ↩ ↩² ↩³ ↩⁴ ↩⁵ ↩⁶ ↩⁷ ↩⁸ ↩⁹ ↩¹⁰

4. IRS Instructions for Form 8889; IRC §213(d). ↩ ↩² ↩³ ↩⁴ ↩⁵ ↩⁶

5. IRC §274(d); Treas. Reg. §1.274-5 and §1.274-5A. ↩

6. Revenue Ruling 2003-43; IRS Notice 2006-69. ↩ ↩²

7. CMS Patient Access API guidance; HL7 FHIR ExplanationOfBenefit. ↩ ↩² ↩³ ↩⁴ ↩⁵