What GP is saying is that yes, multiple @ could be a valid address. Your solution (rejecting them) sounds reasonable for sign-up checks I guess but you want to

What GP is saying is that yes, multiple @ could be a valid address. Your solution (rejecting them) sounds reasonable for sign-up checks I guess but you want to keep receiving incoming mail from such addresses for normal communication.