Your HSA debit card will not work just anywhere. It is programmed to run only at merchants coded as healthcare providers, or at general retailers that use a special checkout system to verify each eligible item. Swipe it at a restaurant, a clothing store, or a gas pump and the transaction is declined at the terminal. Swipe it on something that isn’t a qualified medical expense and the IRS charges you income tax plus a 20% penalty at tax time if you’re under 65.
Where the Card Is Actually Accepted
Every business that takes card payments carries a Merchant Category Code (MCC) assigned by the payment network. HSA cards are set to approve only codes tied to healthcare: hospitals, dental offices, optometrists, pharmacies, and similar providers.1Visa Acceptance Support Center. Payments – Merchant Category Code (MCC) At anything outside those codes, the card is refused before you finish the transaction.
Retailers that sell both healthcare and non-healthcare products — supermarkets, big-box stores, online pharmacies — fall into a middle category. To accept HSA cards, they must run an Inventory Information Approval System (IIAS) at checkout. The IIAS checks every item in your cart against a database of eligible medical products. If you’re buying allergy medicine and groceries together, the system splits the transaction: the card pays for the eligible items, and you cover the rest with another form of payment. A mixed-goods store without a working IIAS cannot accept the card at all.
Online checkouts follow the same rule. A web retailer that sells prescription drugs or medical products alongside other merchandise has to implement an IIAS before it can process HSA card payments. If the site doesn’t verify item eligibility at checkout, the card is declined.
What Counts as a Qualified Medical Expense
Federal law defines what your HSA can pay for. Under the Internal Revenue Code, a qualified medical expense is any cost for diagnosing, treating, or preventing disease, or affecting a structure or function of the body.2Office of the Law Revision Counsel. 26 USC 213 – Medical, Dental, Etc., Expenses In practice, that covers:
- Doctor and hospital visits, including copays, lab work, imaging, ER bills, and inpatient stays.
- Dental care: cleanings, fillings, crowns, root canals, and orthodontics.
- Vision care: exams, prescription glasses, contact lenses, and corrective surgery such as LASIK.
- Mental health care from a licensed professional, including psychiatry, psychotherapy, and substance-abuse treatment.
- Physical therapy and chiropractic care prescribed to treat a diagnosed condition.
- Prescription medications.
The CARES Act permanently added over-the-counter medications — pain relievers, cold medicine, allergy treatments, and the like — without needing a prescription. Menstrual care products such as pads, tampons, liners, and cups also qualify.3Internal Revenue Service. IRS Outlines Changes to Health Care Spending Available Under CARES Act
Common Purchases That Don’t Qualify
Plenty of health-adjacent purchases feel like they should be covered and aren’t. The IRS draws a firm line between treating a medical condition and improving general health. Expenses that only promote overall wellness, without targeting a specific diagnosed condition, are not qualified medical expenses.4Internal Revenue Service. Frequently Asked Questions About Medical Expenses Related to Nutrition, Wellness and General Health Items that typically fail this test:
- Gym memberships, swimming lessons, yoga classes, and general fitness programs, even if a doctor recommends exercise.
- Vitamins and supplements, unless prescribed by a medical practitioner to treat a specific diagnosed condition.
- Nutritional counseling and weight-loss programs, unless they treat a physician-diagnosed disease such as obesity, diabetes, or heart disease.
- Cosmetic procedures that don’t treat illness, correct a congenital deformity, or repair damage from an accident or disfiguring disease.2Office of the Law Revision Counsel. 26 USC 213 – Medical, Dental, Etc., Expenses
- Marital counseling, even though therapy for a diagnosed mental health condition qualifies.
- Health foods and special diets, unless the food doesn’t meet normal nutritional needs and treats a physician-diagnosed illness.
For gray-area items — a massage chair for chronic back pain, for example — a Letter of Medical Necessity from your doctor can bring them inside the rules. The letter should identify the condition, explain why the item is medically necessary rather than for general wellness or cosmetics, and state the expected duration of treatment.
What a Non-Qualified Swipe Costs You
The consequences show up when you file your return. The amount you spent on ineligible items is added to your gross income for the year and taxed at your ordinary rate, which ranges from 10% to 37%.5Office of the Law Revision Counsel. 26 USC 223 – Health Savings Accounts6Internal Revenue Service. Federal Income Tax Rates and Brackets
On top of income tax, account holders under 65 owe an additional 20% penalty on the non-qualified amount, reported on IRS Form 8889.5Office of the Law Revision Counsel. 26 USC 223 – Health Savings Accounts For someone in the 22% bracket, a $500 non-qualified purchase costs roughly $210 in combined tax and penalty, a 42% hit on the withdrawn amount.
Once you turn 65, or if you become disabled, the 20% penalty disappears. You still owe ordinary income tax on non-qualified distributions, so the HSA at that point works much like a traditional retirement account.5Office of the Law Revision Counsel. 26 USC 223 – Health Savings Accounts
Fixing a Mistaken Purchase
If you swipe the card on something you genuinely believed was eligible and later discover it wasn’t, you may be able to return the money to your HSA and avoid both the tax and the 20% penalty. This requires clear and convincing evidence that the distribution was a mistake of fact due to reasonable cause.7Internal Revenue Service. Notice 2004-50
The deadline to return the funds is April 15 of the year after you first knew (or should have known) about the mistake. Custodians are not required to accept returned distributions, though — it’s optional on their part, so call your HSA provider before assuming you can reverse the transaction.7Internal Revenue Service. Notice 2004-50
Using the Card Outside the United States
HSA cards on major payment networks generally work at foreign healthcare providers that accept those networks. You can pay for emergency treatment, doctor visits, or prescriptions while traveling, provided the expense qualifies under U.S. federal rules. The same eligibility standards apply whether care is domestic or overseas.2Office of the Law Revision Counsel. 26 USC 213 – Medical, Dental, Etc., Expenses
Medications carry an extra restriction. A prescription drug bought and used abroad qualifies only if the drug is legal in both that country and the United States.8Internal Revenue Service. Publication 502 (2025), Medical and Dental Expenses Drugs imported or shipped into the U.S. from abroad generally don’t qualify unless they meet FDA requirements for legal importation.
Expect a foreign transaction fee, typically 1% to 3%, deducted from your account along with the cost of care. Confirm with your provider before you travel that the card is enabled for international use.
ATMs, Cash Back, and the Documentation Problem
Some HSA providers let you take cash out at ATMs or get cash back at registers; others disable those features. Even where cash access is allowed, it creates a paperwork burden. The IRS doesn’t treat cash from your HSA as automatically qualified — you have to prove every dollar went to eligible medical costs, with receipts and invoices.9Internal Revenue Service. Publication 969 (2025), Health Savings Accounts and Other Tax-Favored Health Plans
If you can’t produce documentation during an audit, the withdrawal is reclassified as non-qualified, triggering income tax and potentially the 20% penalty. Even if the cash actually paid a real doctor’s bill, missing records make it hard to prove. Pay providers directly with the card whenever you can.
If the Card Is Lost or Stolen
Federal law limits your liability for unauthorized transactions on the card, but only if you report the problem quickly. Under Regulation E, which implements the Electronic Fund Transfer Act, your maximum exposure depends on how fast you notify your HSA provider:10eCFR. 12 CFR 205.6 – Liability of Consumer for Unauthorized Transfers
- Report within 2 business days of discovering the loss and your liability is capped at $50.
- Report after 2 business days but within 60 days of your statement and liability can reach $500.
- Wait longer than 60 days from your statement and you could be responsible for the full amount of unauthorized transfers that occur after the 60-day window.
Many HSA cards carry Visa or Mastercard zero-liability branding, which may go further than the federal floor. Read your card agreement, and report any suspected unauthorized use as soon as you spot it.