DKIM failures occur when the receiving server is unable to verify the DKIM signature in the email header. This can happen for a variety of reasons, including incorrect DKIM setup, changes to the email content after signing, or issues with the DNS records.