Stop HSA and FSA Declines: 5 Setup Steps for U.S. Merchants
Stop HSA and FSA Declines: 5 Setup Steps for U.S. Merchants
Yes, your business can accept HSA and FSA cards, but only through one of two approved paths: full Inventory Information Approval System (IIAS) certification or, for qualifying pharmacies, the SIGIS 90% Rule. Both are governed by SIGIS standards and IRS substantiation rules. Your next move is simple: contact your payment processor or acquirer to check whether your POS and gateway already support IIAS, then start the SIGIS self-assessment or 90% registration.
TL;DR:
- Using IIAS certification or the 90% Rule requires proper inventory tagging, POS setup, and adherence to SIGIS standards to ensure successful acceptance.
- Multi-location stores must qualify each site individually, and the 90% Rule specifically applies only to pharmacy-heavy businesses, not entire chains.
- Common decline reasons include incorrect MCC, mismatched Store ID or Card Acceptor ID, and missing IIAS data fields, which can often be resolved by processor verification.
- Maintaining up-to-date Eligible Product Lists and accurate store information is vital to prevent declines and simplify IRS compliance during audits.
- Merchant Solutions Corp offers integrated support with certification-ready POS, acquirer coordination, guided setup, and ongoing assistance for businesses aiming to accept HSA and FSA payments smoothly.
Table of Contents
- What Do You Need Before Contacting Your Processor?
- IIAS vs. the 90% Rule: Which Path Fits Your Business?
- How to Configure Your POS and Online Checkout for HSA/FSA Cards
- Why Do HSA/FSA Cards Get Declined?
- What Records Do You Need to Keep for Audits?
- Common Pitfalls in HSA/FSA Setup
- How Merchant Solutions Corp Helps You Accept HSA/FSA Payments
- Sources
- FAQ
What Do You Need Before Contacting Your Processor?
Before you call your acquirer, gather the details they’ll ask for. Walking in prepared shortens the setup timeline considerably.
- Confirm the Merchant Category Code (MCC) assigned to each location, since health-related MCCs affect whether transactions route correctly.
- Decide whether IIAS or the 90% Rule fits each store, since multi-location merchants qualify one location at a time.
- Build an inventory map matching your SKUs or UPCs against the SIGIS Eligible Product List, so eligible items get flagged automatically.
- Verify your POS or terminal software can capture and archive IIAS data fields, including item-level eligibility and Rx amounts.
- Collect your ICA/BIN and Card Acceptor ID numbers. Your acquirer needs these to register you with SIGIS.
Skipping this prep step is the single biggest reason merchant onboarding for HSA FSA acceptance drags out longer than it should.
IIAS vs. the 90% Rule: Which Path Fits Your Business?
SIGIS runs two separate compliance tracks, and they solve different problems. IIAS certification checks eligibility item by item at checkout, matching each SKU against the Eligible Product List and auto-substantiating the purchase for the cardholder’s plan. The 90% Rule, by contrast, applies only to drug stores and pharmacies that can attest, store by store, that at least 90% of their gross sales come from eligible medical items.
Each path carries a different operational load:
- IIAS requires ongoing inventory tagging, POS or gateway configuration, and ongoing maintenance every time your product mix changes.
- 90% Rule skips item-level checking but requires annual attestation and shifts the substantiation burden back onto the customer’s receipts and Rx numbers in some cases.
- Multi-location retailers cannot lean on one qualifying store to cover the whole chain. Each location needs its own registration.
Pro Tip: If you run a convenience store or gas station with a small pharmacy counter, don’t assume the 90% Rule applies chain-wide. SIGIS evaluates each address separately, so a flagship location that qualifies won’t carry your other stores with it.
For most retail, restaurant, and general service businesses, IIAS is the only realistic route. The 90% Rule exists specifically for pharmacy-heavy operations where nearly every item on the shelf is medically eligible.
How to Configure Your POS and Online Checkout for HSA/FSA Cards
Getting your systems ready takes coordination across inventory, hardware, and your acquirer. Here’s the sequence that works.
- Tag your inventory. Match every SKU or UPC against the current SIGIS Eligible Product List, and mark eligible items in your POS or e-commerce platform.
- Configure your POS or third-party service (TPS). Enable the IIAS data fields, Rx-amount handling, and partial authorization support your terminal provider offers.
- Coordinate with your acquirer. Share your ICA/BIN and Card Acceptor IDs so they can register you with SIGIS, since SIGIS requires merchant certification to run through an acquiring processor or certified TPS.
- Tag your online cart. If you sell online, flag eligible versus non-eligible items and pass only the eligible subtotal to your gateway during authorization.
- Run live test transactions. Confirm auto-substantiation works correctly with your issuer processors, including edge cases like Rx-only charges.
A few technical details matter more than they seem:
- Partial authorization testing catches problems before a real customer hits a split transaction at the register.
- Rx-amount-only test charges confirm your system separates prescription costs from general merchandise correctly.
- Retail businesses upgrading hardware to support IIAS should compare countertop POS options before committing to a terminal that can’t handle the required data fields.
Online sellers should also review how online ordering systems tag cart items for eligibility, since that logic has to sync with your in-store POS to avoid mismatched reporting.
Why Do HSA/FSA Cards Get Declined?
Most declines trace back to a handful of repeat offenders. Your MCC is the first thing an issuer checks, and health-care related codes (pharmacies, medical services, optical, dental) get treated differently than a general retail MCC. If your business sells eligible items but carries a generic retail MCC, expect friction.
Beyond MCC issues, watch for these common failure points:
- POS or gateway that isn’t IIAS certified, so it can’t send the required eligibility data.
- Incorrect Store ID or Card Acceptor ID on file with the issuer, which is one of the most common root causes of authorization failures.
- Missing IIAS fields in the authorization request itself.
- BIN mismatches between your processor’s records and the card issuer’s system.
Pro Tip: Before escalating to SIGIS or the card issuer, ask your processor to re-verify your MCC and Store ID first. That single check resolves most decline patterns without needing outside intervention.
If declines persist after your acquirer confirms those details are correct, escalate to SIGIS or the issuer directly. They’ll typically request your certification status, recent transaction logs, and the specific error codes returned at the point of sale.
What Records Do You Need to Keep for Audits?
IIAS systems archive the eligible-item breakdown, Rx amount, transaction date, and store ID automatically for every qualifying purchase. That archive is what satisfies most IRS substantiation checks without further paperwork.
Some plans, and merchants operating under the 90% Rule, still require receipts or Rx numbers on request, since substantiation rules vary by plan administrator. Keep transaction archives for at least the period your acquirer and plan administrators recommend, and be ready to produce itemized data on demand. Failing to substantiate a transaction can push the cost back onto the cardholder or trigger a chargeback, so consistent recordkeeping protects both your customer relationship and your processing standing.
Common Pitfalls in HSA/FSA Setup
The most frequent failure isn’t a bad POS. It’s a stale Eligible Product List that nobody updated after a seasonal inventory swap or new SKU rollout.
Merchants also lean too hard on MCC alone, assuming a health-care code guarantees acceptance. It doesn’t. Fixing this takes scheduled EPL maintenance, current POS software, and store-level validation for any multi-location chain. Coordinated onboarding, the kind that checks acquirer IDs and POS settings before go-live, cuts both decline rates and audit friction dramatically.
— Jonathan
How Merchant Solutions Corp Helps You Accept HSA/FSA Payments
Getting IIAS certified without a coordinated partner means juggling your POS vendor, acquirer, and SIGIS paperwork on your own. Merchant Solutions Corp closes that gap with IIAS capable POS integrations, acquirer coordination for your ICA/BIN and Card Acceptor IDs, and guided support through the SIGIS self-assessment process.
The path is straightforward: an assessment of your current setup, configuration of your POS or gateway for IIAS fields, live testing, go-live, and ongoing support after that. Retail and restaurant merchants can pair this with dual pricing to offset processing costs, and free hardware programs with $0 upfront options remove the usual barrier to upgrading terminals. Online sellers can extend the same eligibility logic through e-commerce payment gateways.
If your business is ready to start accepting HSA and FSA cards without guessing at compliance, request a setup consultation and get your acquirer coordination started this week.
FAQ
What Is HSA FSA Acceptance for Merchants?
HSA FSA acceptance means a merchant’s POS and payment systems can process HSA or FSA debit cards for eligible purchases, either through IIAS certification or 90% Rule registration. Without one of these, issuers may decline the transaction outright.
Can Any Retailer Accept FSA Cards?
Any retailer can pursue IIAS certification regardless of industry, but it requires inventory tagging and POS configuration to flag eligible items. Pharmacies and drug stores have the additional option of the 90% Rule if at least 90% of their sales are eligible medical items.
Why Did a Customer’s HSA Card Get Declined at My Store?
The most common causes are an incorrect MCC, a non-certified POS, or mismatched Store ID and Card Acceptor ID information on file with your acquirer. Verifying these details with your processor resolves most decline cases.
Does IIAS Certification Guarantee Every Transaction Gets Approved?
No. SIGIS notes that IIAS improves authorization rates and the customer experience but doesn’t guarantee 100% acceptance, since some employer plans require additional substantiation beyond what IIAS provides.
How Much Does Merchant Solutions Corp Charge for HSA/FSA Setup Support?
Pricing depends on your existing POS setup and processing needs, and current rates are available directly on the Merchant Solutions Corp merchant services page. Free hardware programs with $0 upfront options are available for qualifying merchants.