I disallow the use of special characters, like @, so members can't register an email address as a user name. I don't usually let them even post an email address in a post. They can't register a domain name either (that includes the .com, .net, etc. extensions). If they try to get around it, for instance, using the words "at" or "dot", I change their user name and send them a notification email.