Identity theft cost businesses and financial institutions nearly $ 48 billion and consumer victims reported $ 5 billion in out-of-pocket expenses last year , according to the FTC .