Yes, they are required. Any activity is reported, and your taxpayer also has access to statements, somewhere. They would go to the HSA bank; they would have a log in, so that they also can request reimbursements when they paid out of pocket. They should look at their HSA card.