So I've heard, but I'm hardly the resident expert on such things. I imagine there's an ongoing arms race as far as evading them. At first, medic8r(at)mail.com might work, then the bots learn that (at) = @, and "DOT" = . etc etc

Bears, beets, Battlestar Galactica.