There is no universally correct ratio of vendor-to-in-house fraud detection, and anyone selling you one is selling you something.