The Inventory Information Approval System, known as IIAS, is point-of-sale technology that automatically identifies FSA- and HRA-eligible medical products at checkout so shoppers can pay with their benefit cards without mailing in receipts afterward. Retailers that sell a mix of health and non-health merchandise need it in place, or card networks will decline benefit-card transactions at their registers. Getting there means joining the standards body that maintains the national eligible-product database, certifying your system through one of two tracks, and keeping your membership current every year.
Which Merchants Have to Use IIAS
The IRS split retailers into two groups. Doctors’ offices, dentists, hospitals, and similar providers carry healthcare-related merchant category codes, so card issuers can approve FSA and HRA charges at those locations without extra verification. The gap opens at supermarkets, discount stores, warehouse clubs, and online retailers, where a shopper could just as easily pick up potato chips as bandages.
After December 31, 2007, the IRS barred FSA and HRA debit card use at any merchant lacking a healthcare MCC unless that merchant had implemented an IIAS.1Internal Revenue Service. Notice 2007-02 – Amounts Received Under Accident and Health Plans Drugstores and pharmacies got a separate deadline. Although they carry MCC 5912 for Drug Stores and Pharmacies, they sell enough non-medical merchandise that the IRS treats them as non-healthcare merchants. Starting January 1, 2009, pharmacies also had to implement IIAS or qualify under the 90 percent rule described below.2SIGIS. Program Comparison
If a merchant that needs IIAS hasn’t implemented it, card issuers are required to decline FSA and HRA card transactions at that location.3SIGIS. Merchants That’s lost sales at the register and, on the plan side, a substantiation gap that can jeopardize the tax-favored status of the employer’s plan.
How the Eligible Product List Works
At the heart of any IIAS is a standardized database of items that qualify as medical expenses under Internal Revenue Code Section 213(d), which covers costs for the diagnosis, cure, treatment, or prevention of disease along with related supplies and equipment.4Internal Revenue Service. Publication 502 – Medical and Dental Expenses Items that are merely beneficial to general health, like vitamins or gym memberships, don’t qualify.
The Special Interest Group for IIAS Standards, SIGIS, maintains the national Eligible Product List. Each product is identified by its Universal Product Code, and the merchant’s point-of-sale system checks every scanned item against the list in real time.5SIGIS. Eligible Product List Overview Bandages, contact lens solution, and qualifying over-the-counter medications get approved on the benefit card; a bottle of soda in the same basket does not.
SIGIS updates the list monthly, with new versions generally available by the 15th of each month and product submissions due by roughly the 20th of the prior month.5SIGIS. Eligible Product List Overview Pull the updates consistently. A delayed download can cause the register to decline a newly eligible product or, worse, approve one that’s been removed.
The CARES Act of 2020 widened what counts. Over-the-counter medications no longer require a doctor’s prescription to qualify, and menstrual care products were added to the eligible list. Both changes flow through the SIGIS database directly.
Getting Certified: SIGIS Membership and the Two Tracks
Before a merchant can access the Eligible Product List or start certification, it has to join SIGIS. Membership is organized into four annual tiers, with the applicable tier depending on the nature and scale of the business:6SIGIS. Membership Tiers and Fees
- Tier I: $7,500 per year
- Tier II: $3,750 per year
- Tier III: $750 per year
- Tier IV: $100 per year
Tier IV is paid by credit card at the time of application. Higher tiers can be invoiced and are due within 30 days of membership approval. Once membership is active, certification runs along one of two tracks.
Certified Third-Party Servicer
If your point-of-sale software comes from a provider that SIGIS has already certified, called a Third-Party Servicer, you can skip the technical testing phase. You complete an online TPS Client Merchant Form, and because the software vendor has already demonstrated compliance, SIGIS certifies your locations without separate trial transactions.7SIGIS. IIAS Certification It’s the faster path, so check with your vendor before assuming you’re headed for the full self-assessment.
Merchant Self-Assessment
Merchants whose software isn’t already SIGIS-certified complete a Merchant Certification Self-Assessment in coordination with their payment processor. The self-assessment documents how the system handles UPC-level item identification (isolating eligible from non-eligible items in a single basket), split-tender transactions (charging the benefit card only for the eligible portion and routing the rest to a second payment method), and the data formatting and settlement requirements set by the card networks.
After the self-assessment is submitted, the merchant moves into connectivity testing with trial transactions to confirm that eligibility flags transmit correctly.7SIGIS. IIAS Certification When testing passes, the merchant is added to the SIGIS Certified Merchant List. Card issuers use the Store ID and Card Acceptor ID from that list to approve FSA and HRA transactions at your registered locations.3SIGIS. Merchants
One follow-up matters. After certification, contact your processor to obtain the card networks’ transaction control identification numbers. The processor is the only entity that can retrieve them, and transactions won’t run correctly without them.7SIGIS. IIAS Certification
Annual Renewal and What a Lapse Costs
IIAS certification isn’t a one-time event. SIGIS membership renews annually on the anniversary of your original activation date, and paying before the due date earns a $25 discount.8SIGIS. Renew
Miss the due date and the clock starts. If the renewal fee isn’t received within 50 days past the due date, SIGIS terminates the membership. Your business is removed from the IIAS Merchant List, you lose access to the Eligible Product List, and SIGIS notifies Visa, MasterCard, and card issuers. FSA and HRA transactions at your locations will then be declined.8SIGIS. Renew
Reinstatement after termination costs a $50 fee on top of the standard dues, and you may have to re-certify from scratch. If the lapse goes past 180 days from the original renewal date, SIGIS revokes the membership entirely and you complete every phase of the application again as a new member.8SIGIS. Renew
The 90 Percent Rule for Pharmacies
Drugstores and pharmacies have an alternative to full IIAS. Under the 90 percent rule, a pharmacy can accept FSA and HRA cards without an inventory approval system if at least 90 percent of gross receipts at that specific store location during the prior tax year came from prescriptions and qualifying Section 213(d) items.1Internal Revenue Service. Notice 2007-02 – Amounts Received Under Accident and Health Plans The test is location by location, not company-wide, so a chain might qualify at some stores but not others. Merchants using the rule register that status through SIGIS and maintain it annually. If a store dips below 90 percent in a given year, it needs full IIAS to keep accepting benefit cards.
A caveat: not every plan administrator authorizes FSA and HRA card use at 90 percent rule merchants. Most do, but some administrators or their employer clients choose not to permit it.3SIGIS. Merchants A pharmacy relying solely on the rule may still see some customers’ cards decline depending on who administers their plan.
Recordkeeping After Certification
Certified merchants must be able to retrieve product-level detail for any IIAS transaction for five years.7SIGIS. IIAS Certification That means storing the specific UPCs purchased in each benefit-card transaction, not just the transaction total. The IRS doesn’t mandate a particular format, so any system that clearly shows the relevant data and can produce it on request is acceptable. Most IIAS-capable point-of-sale systems already log this detail automatically, but confirm with your software provider that logs are retained for the full five-year window and not purged during routine maintenance.
What Happens When Ineligible Items Slip Through
When the system works, it prevents the mistake at the register. When it doesn’t, someone pays for it, and the consequences depend on the account type.
For FSA and HRA plans, the employer’s plan has to follow a correction sequence: ask the employee to repay, withhold from future wages where applicable, offset against future reimbursement claims, and suspend card access until the debt is cleared. The bigger risk sits with the plan itself. Every debit card claim must be substantiated. If a plan relies on procedures that don’t verify every transaction, all reimbursements made during the year could be included in employees’ gross income.9Internal Revenue Service. Revenue Ruling 2003-43 That’s why plan administrators care so much about merchants running working IIAS: one non-compliant retailer creates a substantiation gap that can threaten the plan’s tax treatment for everyone enrolled.
HSA holders face the tax directly. If HSA funds pay for something that isn’t a qualified medical expense, the account holder owes income tax on that amount plus a 20 percent additional tax.10Office of the Law Revision Counsel. 26 USC 223 – Health Savings Accounts After age 65 the 20 percent penalty drops off, but the distribution is still taxed as ordinary income. Catching the mistake at the register is far cheaper than finding it on a tax return months later.