An invalid DKIM signature occurs when the recipient's mail server is unable to verify the digital signature attached to the email. This could mean that the email was altered in transit, or that the signature itself was not generated correctly. This often results in the email being flagged as suspicious or, in the worst-case scenario, being rejected altogether.