That doesn't make any sense. You just said that you get a username list and a password list and when you crack their accounts it has their emails? Are you sure you are talking about cracking because if the account is migrated you need their email to crack em.
If this is phishing you are talking about just change your login form in a way that both migrated and unmigrated accounts login