Accertify Achieves HIPAA Compliance to Secure $174B HSA Market Against Fraud

Accertify has achieved HIPAA compliance, a move that allows the fraud prevention specialist to process protected health information (PHI) while securing digital healthcare transactions. For fintech professionals, this represents a significant bridge between high-stakes medical data privacy and the increasingly sophisticated world of digital payment security and account protection.

What was announced

The announcement confirms that Accertify’s Predictive Yes Platform is now fully compliant with the Health Insurance Portability and Accountability Act (HIPAA). This certification is designed to help healthcare providers, insurers, and retailers combat the rising tide of digital fraud without compromising sensitive patient data. The scope of this compliance covers a variety of threats, including payment fraud, account takeover (ATO), and unauthorized access to digital healthcare portals.

The move addresses a specific vulnerability in the Health Savings Account (HSA) sector. Data from Devenir indicates that the HSA market reached nearly 42 million accounts by the end of 2025, holding approximately $174 billion in assets. As these accounts become a standard payment method for medical expenses, they have become prime targets for credential theft. Accertify’s platform is now positioned to serve HSA issuers, pharmacies, and medical supply retailers who must balance fraud detection with the stringent privacy mandates of PHI.

By applying enterprise-grade fraud decisioning to the healthcare journey, the platform aims to reduce the "friction" often associated with security checks in a medical context. The goal is to allow legitimate transactions—such as prescription refills or medical equipment purchases—to proceed instantly while flagging suspicious activity that could indicate a compromised account or stolen payment credentials.

"Healthcare organizations are rapidly digitizing the way consumers pay for care, prescriptions, and other qualified expenses. As healthcare payments become more connected and HSA adoption continues to grow, fraudsters are following the money. Organizations need fraud prevention that protects consumers without creating friction at the moments that matter most."

Andy Mortland, Vice President of Product and Development at Accertify.

The companies involved

Accertify is a prominent provider of fraud prevention and chargeback management solutions. Headquartered in Itasca, Illinois, the company operates the Predictive Yes Platform, which utilizes machine learning and a global data network to help merchants distinguish between legitimate customers and fraudulent actors in real-time. The company has established a significant footprint in the e-commerce and travel sectors, and this latest compliance milestone marks a deeper integration into the regulated healthcare and insurance markets.

Devenir, whose research provided the market context for this announcement, is a leading investment advisor and research firm focused specifically on the HSA industry. Based in Minneapolis, Devenir tracks the growth, asset allocation, and demographic trends of health savings accounts, serving as a primary data source for financial institutions and healthcare organizations navigating the HSA landscape. While Accertify focuses on the security of the transaction, Devenir provides the market intelligence that illustrates why these accounts have become such a high-value target for digital criminals.

What this means

The healthcare sector has historically lagged behind retail in digital payment sophistication, but the rapid growth of HSAs has forced a change. This announcement highlights a critical shift: healthcare is no longer just about claims fraud; it is now a front line for retail-style payment fraud. As medical providers and pharmacies transition into full-scale e-commerce entities, they face the same ATO and payment risks as traditional retailers, but with the added legal burden of HIPAA.

This development puts pressure on legacy fraud providers who lack the specific certifications to handle PHI. It also raises a broader question for the industry: as financial services and healthcare continue to converge through products like HSAs, will we see more fintechs seeking medical-grade compliance to stay competitive? The intersection of fintech and healthtech is becoming a high-growth, high-risk zone where data privacy and transaction speed must coexist.