Your employer has to deposit the money withheld from your paycheck for your HSA as soon as it can reasonably be separated from company funds, which for most payroll systems means within a few business days of payday. Employer-funded contributions like matching or seed money run on a completely different clock and can legally arrive as late as April 15 of the following year. Confusing the two is what leaves people short when they try to pay a pharmacy or lab bill from an account that should already be funded.
The Rule for Payroll Deductions
Money withheld from your wages becomes a plan asset the moment it can reasonably be separated from the employer’s general accounts. That standard comes from 29 CFR 2510.3-102, and it deliberately does not set a fixed number of calendar days. It asks a different question: how quickly can this particular employer, using its actual payroll systems, move the money out?1eCFR. 29 CFR 2510.3-102 – Definition of Plan Assets Participant Contributions
If your employer uses a modern payroll provider that processes direct deposits in two or three business days, that is the benchmark. Holding the money for two weeks when the technology could send it in three days is where legal trouble starts. The regulation’s own examples describe a company that outsources payroll and transmits data electronically, concluding contributions should reach the plan no later than three business days after paychecks are issued.1eCFR. 29 CFR 2510.3-102 – Definition of Plan Assets Participant Contributions
There is an outer limit. For employee welfare benefit plans, the deposit can never come later than 90 days after withholding. That 90-day figure is a ceiling, not a target. An employer that routinely waits 85 days when it could process deposits in a week would still be violating the rule.1eCFR. 29 CFR 2510.3-102 – Definition of Plan Assets Participant Contributions
Payroll frequency doesn’t stretch the window. A monthly-payroll employer cannot claim it deserves more processing time simply because it pays less often. If the system can generate an ACH transfer within three business days of a weekly payroll, it can do the same after a monthly one. Frequency determines how often the deposit obligation arises; it does not extend the time to complete any single transfer.1eCFR. 29 CFR 2510.3-102 – Definition of Plan Assets Participant Contributions
The Seven-Business-Day Safe Harbor for Small Employers
Employers with fewer than 100 plan participants get a concrete benchmark instead of the fuzzy reasonableness standard. Under a safe harbor in the same regulation, deposits made within seven business days of the payroll date are automatically deemed timely. A small employer that consistently deposits within that window doesn’t need to prove it couldn’t have moved faster.1eCFR. 29 CFR 2510.3-102 – Definition of Plan Assets Participant Contributions
Larger employers don’t get the same shortcut. For companies with 100 or more participants, the standard remains the shortest time reasonably needed to segregate and transfer the funds given the employer’s specific systems. The regulation’s examples suggest three to five business days is typical for a large company with an outsourced payroll provider, though the actual expectation follows the employer’s demonstrated capabilities.
Whether ERISA Actually Covers Your HSA
The timing rules in 29 CFR 2510.3-102 are ERISA rules, and not every employer-sponsored HSA is an ERISA-covered plan. The Department of Labor has taken the position that HSAs are generally outside ERISA if the employer meets a safe harbor: employee participation must be voluntary, employees must be free to move funds to any HSA provider, the employer cannot restrict how funds are used, and the employer cannot receive compensation from the HSA vendor.
In practice, most employers that offer HSA payroll deductions run them through a Section 125 cafeteria plan, which is itself an ERISA plan, so the ERISA timing rules apply to those salary reduction contributions. And even when an HSA falls outside ERISA entirely, the prohibited transaction rules under Internal Revenue Code Section 4975 still apply, meaning late deposits can still trigger excise taxes regardless of ERISA status.2Office of the Law Revision Counsel. 26 U.S. Code 4975 – Tax on Prohibited Transactions Whether the ERISA clock technically governs your employer or not, the practical answer is the same: payroll deductions should reach your HSA in days, not weeks.
The Deadline for Employer Contributions
Employer-funded contributions such as matching deposits and annual seed money operate on a completely different timeline. Under IRS guidance, these can be made at any point during the calendar year and up until the deadline for filing your individual federal income tax return, without extensions. For most people, that means April 15 of the following year.3Internal Revenue Service. Notice 2004-2 An employer match promised for 2026 could legally arrive as late as April 15, 2027.
Two details catch people off guard. First, the deadline is tied to the employee’s personal tax return due date, not the employer’s corporate filing date. Second, a tax filing extension does not push the HSA contribution deadline back. IRS Notice 2008-59 is explicit that employer contributions designated for a prior year must be made by the return filing date “without extensions.”4Internal Revenue Service. Notice 2008-59 If your employer says they’ll make the 2026 match “once the extension is filed,” that money will count as a 2027 contribution.
When employers do make a contribution for a prior year, they must notify both the HSA trustee and the employee that the deposit is designated for the earlier tax year. On your W-2 the contribution shows up in the year it was actually deposited, so your Form 8889 will need an adjustment to allocate it correctly.4Internal Revenue Service. Notice 2008-59
How to Check Whether Your Deposits Are on Time
Start by comparing each pay stub to your HSA account activity. Most HSA custodians show individual deposit dates, so the check is quick: when did the money leave your paycheck, and when did it post to the account? A lag of two or three business days is normal. A lag of two or three weeks is not.
Bank processing and payroll software matter here. An employer using same-day ACH is held to a faster standard than one still cutting physical checks and mailing them to the custodian. But most modern payroll providers can transmit funds electronically within one to three business days, and regulators know it.
What To Do if Your Employer Is Depositing Late
If you notice a pattern, raise it with HR or benefits first. Many delays come from administrative errors or payroll provider glitches rather than deliberate withholding, and a direct conversation often clears them up. Put the dates in writing.
If internal channels don’t fix the problem, you can file a complaint with the Department of Labor’s Employee Benefits Security Administration. EBSA investigates delinquent participant contributions through regional offices that handle individual complaints. You don’t need a lawyer, and the agency conducts the investigation, not you. Keep copies of pay stubs showing the withholding amounts and HSA statements showing when deposits actually posted; that is the evidence EBSA needs to decide whether your employer violated the timing rules.5DOL.gov. FAQs About Reporting Delinquent Participant Contributions on the Form 5500
When a late deposit is confirmed, the employer is generally required to make you whole by depositing the missing principal plus lost earnings, and the delay is treated as a prohibited transaction under Section 4975 that carries a 15 percent excise tax on the amount involved, rising to 100 percent if the employer doesn’t correct it within the taxable period.2Office of the Law Revision Counsel. 26 U.S. Code 4975 – Tax on Prohibited Transactions Any custodian fees triggered by the delay are the employer’s responsibility, not yours.