As the custodian, paying the overdraft breaches your fidiciary responsibility as you loaned money to the individual which was the prohibited transaction, not the fact thay they potentially overdrew the account. You need to return all overdraft items and if you cannot, then they need to be collected from the customer outside of the HSA. You probably need to consult both tax and legal counsel at this point.
_________________________
The opinions expressed here should not be construed to be those of my employer:
PPDocs.com