Those that spell it out do not necessary do it all the same way. I've seen:
jim[at]domain.com
jim( a.t.] domain.com
jim THE WORD AT HERE domain.com
etc. etc.
It might all be for a lost cause but if there is a slim chance at obfuscation it costs them nothing to try.