Intercom Email Domain Authentication Failing (DKIM)

How to fix it

Try these in order — the most common fix is first.

1. 1. Correct the records

   Copy steps
   1. Create two CNAMEs and one DMARC TXT exactly as shown
   2. Do not repeat the domain in the Name field; no trailing dots on GoDaddy
   3. Cloudflare: set to DNS only (grey cloud)
   4. Do not use TXT and CNAME with the same name
   Did this fix it? Yes No

2. 2. Verify in Intercom

   Copy steps
   1. Wait for propagation, then click Finish setup and Validate authentication
   2. Verify at least one address under Settings > Channels > Email > Domains & addresses
   3. Needs 'Can manage general and security settings' permission
   Did this fix it? Yes No

3. 3. Sending still fails

   Copy steps
   1. Under Reply addresses set 'Teammate replies from' to Inbound address
   2. For 550 5.7.509, fix DKIM/return-path
   3. Add the sender address if you see 'Sender does not belong to app'
   Did this fix it? Yes No

Symptoms

Domain shows 'Action required' or 'not verified'; you cannot send from your address.

Why it happens

• Wrong record type (DKIM and return-path must be CNAME)
• Cloudflare proxy on
• Domain repeated in Name field or trailing dots on GoDaddy
• DNS not propagated (up to 72 hours)
• No verified address on the domain
• Missing permissions

This guide also covers

• intercom dkim not verified
• intercom domain authentication failed
• intercom email domain not verified
• intercom sender does not belong to app

Other Intercom errors

• Intercom Messenger Not Showing on Website
• Intercom Messenger 403 Missing or Invalid user_hash
• Intercom Fin Resolution Charges Explained
• How to Turn Off Intercom Fin AI Agent
• Intercom Fin Not Answering Questions
• Intercom Emails Not Delivered or Going to Spam
• Intercom Inbox Not Loading or Conversations Missing
• How to Cancel Intercom Subscription