How Long Do You Need to Keep HSA Receipts?

Search this question and you'll get answers ranging from three years to forever. The reason for the spread is that the IRS has never published a specific retention period for HSA receipts. What it publishes instead is a burden of proof, and the retention period falls out of that.

Here's how to reason about it properly, and what your records actually need to contain.

The rule underneath the question

IRS Publication 969 puts the obligation plainly: you must keep records sufficient to show that your HSA distributions were used exclusively for qualified medical expenses. HSA custodians do not verify this. They report the total you withdrew on Form 1099-SA and leave it entirely to you to declare, on Form 8889, how much of that was qualified.

Nobody checks at the time. The check only happens if you're audited — potentially years after the fact. At that point the receipts are the only thing standing between a tax-free withdrawal and a taxable one with penalties attached.

So the question isn't really "how long should I keep receipts." It's "how long could I plausibly be asked to prove this?"

The audit window sets the floor

The IRS generally has three years from the date you file a return to audit it. That extends to six years if you've substantially understated income (by more than 25%), and there's no time limit at all in cases of fraud or an unfiled return.

If you reimburse yourself in 2026 and file that year's return in early 2027, the ordinary window closes in 2030. That's the floor: at minimum, three years past the filing date of the return on which you reported the distribution. Many tax professionals suggest seven years as a practical buffer that covers the six-year case comfortably.

Note what that's anchored to. It's not three years from the expense. It's three years from the return where you claimed the reimbursement. Those can be decades apart.

Why the real answer is "much longer than you think"

HSAs have a feature almost no other account has: there is no deadline to reimburse yourself. You can pay a medical bill today and pull that money out of your HSA in thirty years. The IRS imposes no time limit, as long as two conditions hold:

1. The expense was incurred after you established your HSA
2. The expense was never reimbursed by insurance or deducted on a prior tax return

That's the mechanism behind the shoebox strategy — leave the balance invested and compounding, pay bills out of pocket, and cash in the accumulated receipts later when the account has grown substantially.

But it also means the retention clock doesn't start when you get the receipt. It starts when you use it. A receipt from 2026 that you reimburse in 2050 needs to survive until roughly 2054.

The practical answer: keep every HSA receipt until at least three to seven years after you've reimbursed yourself for it. If you're running the shoebox strategy, that effectively means keeping them for the life of the account.

Also keep proof of when your HSA was established

This one is easy to overlook and occasionally decisive. Expenses only qualify if they were incurred after your HSA was established. If you're reimbursing a fifteen-year-old expense, you may need to demonstrate that your account predates it.

Keep your original account-opening paperwork or the earliest statement showing the establishment date. It costs nothing to file it once and it's genuinely awkward to reconstruct later if the custodian has been acquired twice in the interim.

What a receipt actually has to show

Not every scrap of paper qualifies. A credit card statement line reading "CVS $84.31" proves you spent money at a pharmacy — it does not prove you spent it on something medical. That's a real distinction in an audit.

Adequate documentation generally includes:

• Provider name — who you paid
• Patient name — who received care (must be you, your spouse, or a dependent)
• Date of service — when care was actually provided, not necessarily when you paid
• Description of the service or item — specific enough to establish it's medical
• Amount you actually paid — your out-of-pocket portion after insurance

The best single document is usually the Explanation of Benefits (EOB) from your insurer, because it shows all of this at once and comes from a third party. Pair it with the itemized bill or an itemized pharmacy receipt where relevant.

For over-the-counter items, an itemized store receipt showing the specific product works. The summary receipt with a total does not.

For anything requiring medical necessity to qualify — certain supplements, weight-loss programs, home modifications — you also want a Letter of Medical Necessity from your provider, kept with the receipt. Storing them separately is how they get separated permanently.

If you're unsure whether something even counts, our rundown of what qualifies as an HSA-eligible expense covers the categories that surprise people most.

Track reimbursement status, not just receipts

A subtle failure mode: double-dipping. If you reimburse yourself for a $400 procedure in 2027 and then, having forgotten, reimburse yourself again in 2032, the second withdrawal is non-qualified. You'd owe income tax plus — if you're under 65 — a 20% penalty.

This is easy to do accidentally when receipts sit in a folder for years with no state attached to them. A pile of paper doesn't remember what you've already claimed.

You need to know, per receipt, whether it has been used. That's the difference between storage and a system.

Paper receipts are a bad long-term medium

Thermal paper — the shiny stock most pharmacies and many clinics print on — fades. Not over decades. Often in one to three years, faster if it's stored somewhere warm or exposed to light. A shoebox of thermal receipts from 2026 may be genuinely blank by 2031.

There's an irony worth naming: the shoebox strategy is the single best use of an HSA, and an actual shoebox is close to the worst possible way to execute it.

Digital copies are acceptable to the IRS. Scan or photograph everything, and store it somewhere with three properties:

1. Durable — survives a phone upgrade, a laptop failure, and a house move
2. Searchable — you can find a 2026 dental receipt in 2050 without opening 400 files
3. Stateful — records what's been reimbursed and what's still available

A folder of photos on your phone satisfies exactly one of those.

A practical retention policy

If you want one rule to follow:

• Scan every medical receipt and EOB the week you get it, while you still know what it was for
• Tag each one with provider, patient, date of service, category, and amount
• Mark it reimbursed the moment you withdraw against it
• Keep everything for at least seven years after reimbursement, and if you're deliberately deferring reimbursements, keep them indefinitely
• Keep your HSA establishment date with the archive

This is exactly the workflow SaveMyHSA implements — receipts stored with the metadata the IRS cares about, a reimbursed flag so nothing gets claimed twice, and bulk export so the whole archive is portable if you ever need to hand it to an accountant.

The receipts are what convert your HSA balance into tax-free money. Losing them doesn't lose you the balance — it just quietly converts it into ordinary taxable income.

This is general information, not tax advice. Retention requirements can depend on your specific circumstances — consult a tax professional.