The simple regex is easy: @"[^\<\>...]" where the elipsis is the list of individual characters you want to prohibit.
However, I would suggest that a better email address validation would be a good idea, especially since '@' is
not a legal character in an email address (it is the separator between the domain and the local addresses and cannot be used for any other reason): have a look at
this[
^]