Based on a change introduced (quietly) in the Summer '26 release it's now a major pain in the butt to verify an organization-wide email address.
https://www.freelikeapuppy.tech/post/unverifiable
@Admin Group, Philadelphia, US @Nonprofit User Group, Philadelphia, US @Admin Group, West Chester, US @Nonprofit and Education MindShare @Salesforce MVP Collaboration Space @MVP Office Hours (US)
#Organization-Wide Email Addresses
Thank you so much for this blog post! It explains why resetting people's passwords in our sandbox became a major task. Resets now look like logging in as them, changing the email to one I control, accepting the email change, resetting their password, and giving them the password so that they can log in and change their email address. Otherwise, with the .invald at the end of their username, there's no way to get them in if they've forgotten their password.